Suspicious Rundll32 Activity Invoking Sys File — Detection Rule
Detects suspicious process related to rundll32 based on command line that includes a *.sys file as seen being used by UNC2452
Detects suspicious process related to rundll32 based on command line that includes a *.sys file as seen being used by UNC2452