Dohdoor LOLBin Sideloading Detection

Detects the execution of legitimate Windows binaries from suspicious public or shared locations, a technique used by the Dohdoor malware campaign to sideload a malicious DLL.