OceanLotus SPECTRALVIPER DLL Sideload via IntelAudioService.exe loading DtlCrashCatch.dll
This rule detects potential DLL sideloading of 'DtlCrashCatch.dll' by the 'IntelAudioService.exe' process, as well as the execution of 'IntelAudioService.exe' from suspicious user-profile directories with specific command-line arguments indicative of the SPECTRALVIPER malware execution chain.
Microsoft Sentinel (KQL)
