DLL Side-Loading via Security Software Binaries

Detects DLL side-loading attacks using legitimate security software binaries (but often targeted) to execute malicious DLL payloads, covering various security vendors commonly abused.

Splunk (SPL)