Remote DLL Load Via Rundll32.EXE — Detection Rule

Detects a remote DLL load event via "rundll32.exe".

Read the full analysis on IntelFusions