Driver/DLL Installation Via Odbcconf.EXE (3f5491e2-8db8-496b-9e95-1029fce852d4)

Detects execution of "odbcconf" with "INSTALLDRIVER" which installs a new ODBC driver. Attackers abuse this to install and run malicious DLLs.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Driver/DLL Installation Via Odbcconf.EXE (3f5491e2-8db8-496b-9e95-1029fce852d4)	Sigma-Rules	Odbcconf - T1218.008 (6e3bd510-6b33-41a4-af80-2d80f3ee0071)	Attack Pattern	1
Odbcconf - T1218.008 (6e3bd510-6b33-41a4-af80-2d80f3ee0071)	Attack Pattern	System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	2