Detects rundll32 execution where the DLL is located on a remote location (share)
Already have an account? Log in