Windows MSIExec Unregister DLLRegisterServer

The analytic detects the use of msiexec.exe with the `/z` switch parameter, which is used to unload DLLRegisterServer. This activity can be indicative of an attempt to deregister a DLL, potentially disrupting legitimate services or hiding malicious activity. If confirmed malicious, this could allow an attacker to disable security controls, evade detection, or disrupt system functionality, leading to further compromise of the environment.