Specific Havoc DLL Sideloading Pairs
Detects instances of specific legitimate binaries loading known malicious proxy DLLs. This pattern targets the exact sideloading pairs identified in a campaign leveraging a modified Havoc C2 agent.
Microsoft Sentinel (KQL)
