Dohdoor LOLBin Sideloading Detection
Detects the execution of legitimate Windows binaries from suspicious public or shared locations, a technique used by the Dohdoor malware campaign to sideload a malicious DLL.
Microsoft Sentinel (KQL)

Detects the execution of legitimate Windows binaries from suspicious public or shared locations, a technique used by the Dohdoor malware campaign to sideload a malicious DLL.

Already have an account?