Unsigned Binary Loaded From Suspicious Location — Detection Rule

Detects Code Integrity (CI) engine blocking processes from loading unsigned DLLs residing in suspicious locations