Today we tackle an SOC125 alert for mid Feb 2021. This alert centers around Suspicious Rundll32 Activity on an workstation. Will we find a threat or will this all be an false positive?
NOTES:
[ Ссылка ]
[ Ссылка ]
[ Ссылка ]
![](https://s2.save4k.ru/pic/v5_lqQ_jbpk/maxresdefault.jpg)
Today we tackle an SOC125 alert for mid Feb 2021. This alert centers around Suspicious Rundll32 Activity on an workstation. Will we find a threat or will this all be an false positive?
NOTES:
[ Ссылка ]
[ Ссылка ]
[ Ссылка ]