Msxsl.EXE Execution
Detects the execution of the MSXSL utility (msxsl.exe). This utility can be abused by adversaries to execute Extensible Stylesheet Language (XSL) files, potentially bypassing application whitelisting defenses and executing arbitrary code. The rule specifically looks for the execution of 'msxsl.exe'.
Sigma
