DLL Call by Ordinal Via Rundll32.EXE — Detection Rule

Detects calls of DLLs exports by ordinal numbers via rundll32.dll.

Read the full analysis on IntelFusions