File Creation In Suspicious Directory By Msdt.EXE — Detection Rule

Detects msdt.exe creating files in suspicious directories which could be a sign of exploitation of either Follina or Dogwalk vulnerabilities

Read the full analysis on IntelFusions