avatar

SigmaHQ Detections

@sigmaHQ
12 followers122,473 downloads2,593 copies16 likes160,492 views

6,800 detections

Detects potential DLL sideloading of "DbgModel.dll"
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading of "libcurl.dll" by the "gup.exe" process from an uncommon location
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading using JUSTSYSTEMS Japanese word processor
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading of "mfdetours.dll". While using "mftrace.exe" it can be abused to attach to an arbitrary process and force load any DLL named "mfdetours.dll" from the current directory of execution.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading of "ShellDispatch.dll"
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading of "SolidPDFCreator.dll"
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects loading of a DLL by the VMware Xfer utility from the non-default directory which may be an attempt to sideload arbitrary DLL
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading of "waveedit.dll", which is part of the Nero WaveEditor audio editing software.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects potential DLL sideloading of "wwlib.dll"
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects unsigned module load by ClickOnce application.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Page 68 of 680