Amsi.DLL Load By Uncommon Process — Detection Rule

Detects loading of Amsi.dll by uncommon processes

Read the full analysis on IntelFusions