Process Memory Dump via RdrLeakDiag.EXE — Detection Rule

Detects the use of the Microsoft Windows Resource Leak Diagnostic tool "rdrleakdiag.exe" to dump process memory

Read the full analysis on IntelFusions