admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Small Text Updates

Browse Source 
Small Text Updates to "Loading Of Dynwrapx Module"
This commit is contained in:
pyth0n1c
2022-01-04 08:38:05 -08:00
committed by GitHub
parent 5702bf9c7d
commit 249c784daf
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/endpoint/loading_of_dynwrapx_module.yml
+1 -1
View File
@@ -8,7 +8,7 @@ datamodel:
- Endpoint
description: DynamicWrapperX is an ActiveX component that can be used in a script
to call Windows API functions, but it requires the dynwrapx.dll to be installed
and registered. With that, registering or loading dynwrapx.dll to a is host highly
and registered. With that, registering or loading dynwrapx.dll to a host highly
suspicious. In most instances when it is used maliciously, the best way to triage
is to review parallel processes and pivot on the process_guid. Review the registry
for any suspicious modifications meant to load dynwrapx.dll. Identify any suspicious