security_mitigations | Detection.FYI

Microsoft Defender Blocked from Loading Unsigned DLL

Aug 12, 2024 · attack.defense-evasion attack.t1574.002 ·
Share on:

Detects Code Integrity (CI) engine blocking Microsoft Defender's processes (MpCmdRun and NisSrv) from loading unsigned DLLs which may be an attempt to sideload arbitrary DLL

Read More
Unsigned Binary Loaded From Suspicious Location

Aug 12, 2024 · attack.defense-evasion attack.t1574.002 ·
Share on:

Detects Code Integrity (CI) engine blocking processes from loading unsigned DLLs residing in suspicious locations

Read More