Suspicious Splwow64.exe Execution Without Parameters
Detects suspicious Splwow64.exe process execution without any command line parameters. This behavior can be indicative of indirect command execution or defense evasion techniques where adversaries might abuse legitimate Windows processes to execute malicious code without directly invoking a command-line interpreter.
Sigma

