Load of bindfltapi.dll or bindlink.dll for Bind-Link Management
Detects the loading of 'bindfltapi.dll' or 'bindlink.dll' by processes other than known legitimate system or container management services. These DLLs are associated with Bind-Link Management, and their loading by unexpected processes could indicate potential DLL hijacking or unauthorized abuse of these modules.
Sigma
