Bumblebee DLL Sideloading: consent.exe Loading DLL from Temp/AppData
Detects suspicious module loads (DLLs) by the Windows Consent UI process (consent.exe) or from an application installation folder in the temporary directory. This pattern is indicative of potential DLL side-loading or hijacking, where an adversary places a malicious DLL in an unexpected location to be loaded by a legitimate process.
Cortex XDR
