Suspicious Windows Update Agent Empty Cmdline — Detection Rule

Detects suspicious Windows Update Agent activity in which a wuauclt.exe process command line doesn't contain any command line flags

Read the full analysis on IntelFusions