Rundll32 Execution With Uncommon DLL Extension

SigmaHQ Detections@sigmaHQ

•updated 18 days ago•0•0•0

Detects the execution of rundll32 with a command line that doesn't contain a common extension