DllUnregisterServer Function Call Via Msiexec.EXE

SigmaHQ Detections@sigmaHQ

•updated 12 days ago•1•0•1

Detects MsiExec loading a DLL and calling its DllUnregisterServer function