Odbcconf.exe Execution from Suspicious DLL Location
Detects the execution of 'odbcconf.exe' where the DLL being registered is located in a potentially suspicious directory. Adversaries may abuse odbcconf.exe to proxy execution of malicious payloads, often placing the DLL in common temporary or public user directories to evade detection or bypass application control.
Sigma
