Rundll32 InstallScreenSaver Execution — Detection Rule
An attacker may execute an application as a SCR File using rundll32.exe desk.cpl,InstallScreenSaver
An attacker may execute an application as a SCR File using rundll32.exe desk.cpl,InstallScreenSaver