Argamal FFmpeg DLL Side-Loading Activity

Detects FFmpeg DLL loading outside expected application directories. Argamal abuses modified FFmpeg libraries to initiate execution.

Microsoft Sentinel (KQL)