Potential DLL Sideloading Of DBGHELP.DLL

SigmaHQ Detections@sigmaHQ

•updated Oct 9, 2025•0•18

Detects potential DLL sideloading of "dbghelp.dll" by identifying instances where this DLL is loaded from a non-standard or unexpected directory. This technique can be used by adversaries for defense evasion, persistence, or privilege escalation.