Suspicious Volume Shadow Copy Vssapi.dll Load — Detection Rule

Detects the image load of VSS DLL by uncommon executables

Read the full analysis on IntelFusions