Potentially Suspicious ODBC Driver Registered — Detection Rule
Detects the registration of a new ODBC driver where the driver is located in a potentially suspicious location
Detects the registration of a new ODBC driver where the driver is located in a potentially suspicious location