PDFSIDER DLL Side-Loading of cryptbase.dll
Detects when a legitimate application, such as pdf24.exe, loads 'cryptbase.dll' from a non-standard directory. This is a known DLL side-loading technique used by the PDFSIDER malware.
Microsoft Sentinel (KQL)
