Squiblydoo regsvr32.exe Proxy Execution via /i with URL or SCT File
Detects execution of regsvr32.exe with arguments that indicate loading of a remote scriptlet file (.sct) or script over HTTP/HTTPS, a common technique for bypassing application control and executing arbitrary code, often referred to as Squiblydoo.
SentinelOne
