Potentially Suspicious Rundll32 Activity

SigmaHQ Detections@sigmaHQ

•updated May 17, 2023•0•0•1

Detects suspicious execution of rundll32, with specific calls to some DLLs with known LOLBIN functionalities