Suspicious Outbound Network Connection Initiated By Microsoft Dialer (via network_connection)

This rule detects outbound network connection initiated by Microsoft Dialer. The Microsoft Dialer, also known as Phone Dialer, is a built-in utility application included in various versions of the Microsoft Windows operating system. Its primary function is to provide users with a graphical interface for managing phone calls via a modem or a phone line connected to the computer. This is an outdated process in the current conext of it's use and is a common target for info stealers for process injection, and is leveraged to make C2 connections, common example is "Rhadamanthys"