APT Lazarus DreamLoader DLL Sideloading
Detects potential DLL sideloading associated with the Lazarus Group's DreamLoader campaign. This involves legitimate Windows executables (wkspbroker.exe, wksprt.exe) being executed from non-standard directories shortly after a DLL is created in the same location.
YARA-L
