Module dispatcher loading n-prefixed native DLL modules
Detects the loading of native DLL modules that follow an 'n-[filename].dll' naming convention. This pattern is commonly observed in reflective DLL loading techniques or specific framework loaders to distinguish these modules from standard .NET DLLs, potentially indicating stealthy code injection or execution within a process.
Microsoft Sentinel (KQL)
