Rule Info
Tags
DEMO attack.defense_evasion attack.privilege_escalation attack.t1574.002 attack.persistence attack.t1574.001
Modified
2023-03-15 00:00:00
Author
X__Junior
Name
Potential Wazuh Security Platform DLL Sideloading
Description
Detects potential DLL sideloading of DLLs that are part of the Wazuh security platform
Date
2023-03-13 00:00:00
Reference
Id
db77ce78-7e28-4188-9337-cf30e2b3ba9f
Type
Community Rule
Link to Public Repo
Rule History
Commit
Date
Author
Title
Scan your endpoints, forensic images or collected files with our portable scanner THOR