Potential Arbitrary DLL Load Using Winword — Detection Rule
Detects potential DLL sideloading using the Microsoft Office winword process via the '/l' flag.
Detects potential DLL sideloading using the Microsoft Office winword process via the '/l' flag.