INISAFECrossWebEXSvc spawning fsquirt.exe with unsigned DLL load (Lazarus)
Detects the execution of fsquirt.exe spawned by INISAFECrossWebEXSvc.exe where fsquirt.exe subsequently loads an unsigned or untrusted DLL, indicative of a potential TechHub DLL side-loading technique.
Microsoft Sentinel (KQL)
