All Detections

Process Memory Dump Via Comsvcs.DLL

avatar
Google SecOps@GoogleSecOps
updated May 18, 20260010

Detects a process memory dump via comsvcs.dll using rundll32, covering multiple different techniques

YARA-L