SilverFox DLL Side-Loading via Trojanized Panasonic and Philips OEM Binaries
This rule detects potential DLL side-loading activity associated with the SilverFox threat actor, specifically targeting trojanized Panasonic and Philips OEM software. It looks for suspicious DLLs (UxEnhance64.dll, XPSPLOG.dll) being loaded, or legitimate Panasonic/Philips binaries loading DLLs from non-standard paths, including the Public user directory.
Microsoft Sentinel (KQL)
