HackTool - SharpEvtMute DLL Load — Detection Rule

Detects the load of EvtMuteHook.dll, a key component of SharpEvtHook, a tool that tampers with the Windows event logs

Read the full analysis on IntelFusions