Suspicious GUP.exe Child Process
Detects the Notepad++ updater process (gup.exe) spawning unusual child processes. Attackers have been observed hijacking the update process to execute malicious payloads.
Microsoft Sentinel (KQL)
Detects the Notepad++ updater process (gup.exe) spawning unusual child processes. Attackers have been observed hijacking the update process to execute malicious payloads.
Already have an account?