Suspicious Rundll32 Invoking Inline VBScript — Detection Rule

Detects suspicious process related to rundll32 based on command line that invokes inline VBScript as seen being used by UNC2452

Read the full analysis on IntelFusions