Potential Iviewers.DLL Sideloading

Rule Info

Name
Potential Iviewers.DLL Sideloading
Author
X__Junior (Nextron Systems)
Description
Detects potential DLL sideloading of "iviewers.dll" (OLE/COM Object Interface Viewer)
Date
2023-03-21 00:00:00
Modified
None
Id
4c21b805-4dd7-469f-b47d-7383a8fcb437
Tags
attack.defense_evasion attack.privilege_escalation attack.t1574.001 attack.t1574.002 DEMO
Type
Community Rule

Rule History

Author
Title
Date
Commit
github-actions[bot]
Merge PR #4700 from @nasbench - Promote older rules status from `experimental` to `test`
2024-02-01
Nasreddine Bencherchali
chore: author update
2023-04-12
Mohamed Ashraf
feat: new rule related to possible iviewers.dll sideloading (#4131)
2023-03-22
Nasreddine Bencherchali
chore: increase level of some sideloading rules
2023-03-15
Nasreddine Bencherchali
fix: improve metadata
2023-03-13
Mohamed Ashraf (X__Junior)
new rules related to possible dll sideloading
2023-03-13