BITS Client BitsProxy DLL Loaded By Uncommon Process — Detection Rule

Detects an uncommon process loading the "BitsProxy.dll". This DLL is used when the BITS COM instance or API is used. This detection can be used to hunt for uncommon processes loading this DLL in your environment. Which may indicate potential suspicious activity occurring.

Read the full analysis on IntelFusions