Potential System DLL Sideloading From Non System Locations — Detection Rule
Detects DLL sideloading of DLLs usually located in system locations (System32, SysWOW64, etc.).
Detects DLL sideloading of DLLs usually located in system locations (System32, SysWOW64, etc.).