Possible impact of 'SMOKEDHAM backdoor' with MSDTC service privilege escalation via command line

This rule detects activity related to 'SMOKEDHAM backdoor' which manipulate the default running service accounf of the MSDTC service in order to DLL side-load a malicious binary.