Rule Info
Name
Potential SmadHook.DLL Sideloading
Author
X__Junior (Nextron Systems)
Description
Detects potential DLL sideloading of "SmadHook.dll", a DLL used by SmadAV antivirus
Date
2023-06-01 00:00:00
Modified
None
Id
24b6cf51-6122-469e-861a-22974e9c1e5b
Tags
attack.defense_evasion attack.privilege_escalation attack.t1574.001 attack.t1574.002 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR