ServiceDll Hijack — Detection Rule

Detects changes to the "ServiceDLL" value related to a service in the registry. This is often used as a method of persistence.

Read the full analysis on IntelFusions