Potential Obfuscated Ordinal Call Via Rundll32 — Detection Rule

Detects execution of "rundll32" with potential obfuscated ordinal calls

Read the full analysis on IntelFusions