Hide Navigation Hide TOC VMGuestLib DLL Sideload (70e8e9b4-6a93-4cb7-8cde-da69502e7aff) Detects DLL sideloading of VMGuestLib.dll by the WmiApSrv service. Cluster A Galaxy A Cluster B Galaxy B Level DLL - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34) Attack Pattern VMGuestLib DLL Sideload (70e8e9b4-6a93-4cb7-8cde-da69502e7aff) Sigma-Rules 1 Hijack Execution Flow - T1574 (aedfca76-3b30-4866-b2aa-0f1d7fd1e4b6) Attack Pattern DLL - T1574.001 (2fee9321-3e71-4cf4-af24-d4d40d355b34) Attack Pattern 2