Operation Silklure ValleyRAT DLL Sideloading
Detects the DLL side-loading of 'jli.dll' by 'keytool.exe' from common malware staging directories. This is a more generic version of a rule detecting a technique used by ValleyRAT in Operation Silk Lure.
YARA-L
