DLL search order hijacking and DLL sideloading are commonly used by nation state sponsored attackers to evade detection.