Question: During incident response, a system is found to have a suspicious DLL in the same directory as a legitimate Windows binary. The legitimate binary is
During incident response, a system is found to have a suspicious DLL in the same directory as a legitimate Windows binary. The legitimate binary is not located in the System directory. What is the likely technique being used by the malware?
Question options:
Privilege escalation
DLL loadorder hijacking
Inline hooking
DLL injection
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
