Rule Info
Tags
attack.defense_evasion attack.t1574.001 DEMO attack.privilege_escalation attack.t1574.002
Name
Potential Goopdate.DLL Sideloading
Id
b6188d2f-b3c4-4d2c-a17d-9706e0851af0
Date
2023-05-15 00:00:00
Modified
2023-05-20 00:00:00
Description
Detects potential DLL sideloading of "goopdate.dll", a DLL used by googleupdate.exe
Author
X__Junior (Nextron Systems), Nasreddine Bencherchali (Nextron Systems)
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR