Regsvr32 Squiblydoo Proxy Execution via scrobj.dll
Detects the use of regsvr32.exe to execute remote scriptlets, often via HTTP/S or FTP, which is a common technique used to bypass application control and execute malicious code without touching the disk or properly registering a COM object (Squiblydoo).
Microsoft Sentinel (KQL)
