Rule Info
Name
Potential Python DLL SideLoading
Author
Swachchhanda Shrawan Poudel
Description
Detects potential DLL sideloading of Python DLL files.
Date
2024-10-06 00:00:00
Modified
2025-08-18 00:00:00
Id
d36f7c12-14a3-4d48-b6b8-774b9c66f44d
Tags
attack.privilege-escalation attack.persistence attack.defense-evasion attack.t1574.001
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Swachchhanda Shrawan Poudel
Merge PR #5599 from @swachchhanda000 - fix FPs around pyinstaller
2025-10-01
github-actions[bot]
Merge PR #5637 from @nasbench - Promote older rules status from `experimental` to `test`
2025-09-22
Swachchhanda Shrawan Poudel
Merge PR #5031 from @swachchhanda000 - Add `Potential Python DLL SideLoading`
2024-10-07
Scan your endpoints, forensic images or collected files with our portable scanner THOR