Rule Info
Name
Potential DLL Sideloading Via taskhost.exe
Author
MalGamy
Description
Detects potential DLL sideloading of "SbieDll.dll".
Reference
Date
2024-10-21 00:00:00
Modified
None
Id
0a82d6c8-b9ba-439c-8f5d-c89efb2693c4
Tags
attack.defense-evasion attack.privilege-escalation attack.t1574.001 attack.t1574.002
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR