Rundll32 Execution Without CommandLine Parameters — Detection Rule
Detects suspicious start of rundll32.exe without any parameters as found in CobaltStrike beacon activity
Detects suspicious start of rundll32.exe without any parameters as found in CobaltStrike beacon activity