Suspicious JavaScript Execution Via Mshta.EXE — Detection Rule

Detects execution of javascript code using "mshta.exe".

Read the full analysis on IntelFusions