Loading Diagcab Package From Remote Path
Detects when a diagcab package is loaded from a remote path. This behavior has been observed in the context of the DogWalk vulnerability, where attackers could leverage this to achieve arbitrary code execution.
Sigma
