Possible DLL Side-Loading Using ADNotificationManager.exe
Detects ADNotificationManager.exe (Adobe Notification Manager) running from an unusual or unknown directory, which may be indicative of DLL Side-Loading. This binary has been observed being abused by multiple threat actors including GOLD BLADE to sideload malicious DLLs and deliver C2 payloads such as Havoc.
Microsoft Sentinel (KQL)
