Potential AVKkid.DLL Sideloading
Detects potential DLL sideloading of 'AVKkid.dll' by monitoring image load events. The rule specifically looks for 'AVKkid.dll' being loaded by any process, and then filters out legitimate loads by G DATA antivirus software from its expected installation paths. This helps identify malicious instances where 'AVKkid.dll' might be used for persistence, defense evasion, or privilege escalation outside of its legitimate context.
Sigma
