Rundll32 Execution Without CommandLine Parameters — Detection Rule

Detects suspicious start of rundll32.exe without any parameters as found in CobaltStrike beacon activity

Read the full analysis on IntelFusions