Non-DLL Extension File Renamed With DLL Extension

SigmaHQ Detections@sigmaHQ

•updated Oct 1, 2024•0•28

Detects rename operations of files with non-DLL extensions to files with a DLL extension. This is often performed by malware in order to avoid initial detections based on extensions.