Susp Command-Line Arguments with Rundll32 or WMIC

Danny Y@zendannyy

•updated Apr 2, 2026•6•0•90

Detects suspicious command-line arguments used with Windows utilities (LOLBAS)