Rule Info
Tags
attack.defense_evasion attack.t1574.001 DEMO attack.privilege_escalation attack.t1574.002
Name
Potential WWlib.DLL Sideloading
Id
e2e01011-5910-4267-9c3b-4149ed5479cf
Date
2023-05-18 00:00:00
Modified
None
Description
Detects potential DLL sideloading of "wwlib.dll"
Author
X__Junior (Nextron Systems)
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR