1 rule found for "CVE-2015-1641"
Detects Winword starting uncommon sub process MicroScMgmt.exe as used in exploits for CVE-2015-1641