Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1574.002

DLL Side-Loading

StealthExecution deprecated 1 detection found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
splunk Windows SCCM Adsource DLL Was Planted In SMS Provider Directory production 2026-08-20