Abusable DLL Potential Sideloading From Suspicious Location — Detection Rule

Detects potential DLL sideloading of DLLs that are known to be abused from suspicious locations

Read the full analysis on IntelFusions