BloodAlchemy DLL Sideload via FineReader.exe loading dsp_ippv2_x64.dll
This rule detects potential DLL side-loading where 'FineReader.exe' loads the library 'dsp_ippv2_x64.dll'. It joins process creation and image load events to identify if the application was executed shortly before the library was loaded, which is a common indicator of side-loading activities.
Microsoft Sentinel (KQL)
