GUP.exe Anomalous Network Connection
Detects network connections from the Notepad++ updater process (gup.exe) to domains that are not part of the official update infrastructure. The primary attack vector for this threat involves intercepting GUP traffic to redirect downloads to malicious third-party servers.
Sigma
