Rundll32 Shimcache Flush

This analytic detects the execution of `rundll32.exe` with command-line arguments specifically designed to clear the Shimcache (Application Compatibility Cache) by calling `apphelp.dll,ShimFlushCache`. Clearing the Shimcache is an anti-forensic technique used by adversaries to remove forensic artifacts and evade detection, making it harder for incident responders to trace their activities and maintain persistence on a compromised system.