Potentially Suspicious Rundll32 Activity

심각도 보통 Sigma 탐지 룰. Detects suspicious execution of rundll32, with specific calls to some DLLs with known LOLBIN functionalities

작성자: juju4, Jonhnathan Ribeiro, oscd.community, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본