Suspicious ASPX File Drop by Exchange — Detection Rule

Detects suspicious file type dropped by an Exchange component in IIS into a suspicious folder

Read the full analysis on IntelFusions