Suspicious Regsvr32 Execution From Remote Share (88a87a10-384b-4ad7-8871-2f9bf9259ce5)

Detects REGSVR32.exe to execute DLL hosted on remote shares

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Suspicious Regsvr32 Execution From Remote Share (88a87a10-384b-4ad7-8871-2f9bf9259ce5)	Sigma-Rules	Regsvr32 - T1218.010 (b97f1d35-4249-4486-a6b5-ee60ccf24fab)	Attack Pattern	1
System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	Regsvr32 - T1218.010 (b97f1d35-4249-4486-a6b5-ee60ccf24fab)	Attack Pattern	2