CreateRemoteThread API and LoadLibrary — Detection Rule

Detects potential use of CreateRemoteThread api and LoadLibrary function to inject DLL into a process

Read the full analysis on IntelFusions