Malicious Kernel Driver Load - Alinubx.sys (CcProtect.sys BYOVD)

Ibrahim Saud@tektrix

•updated 20 days ago•0•0•0

Detects the loading or file presence of known suspicious or potentially malicious kernel drivers, specifically 'alinubx.sys' and 'ccprotect.sys', which are associated with unauthorized system-level activity or potential rootkit behavior.