Adware Hash Detection

Ankit Mehta@Secvyn

•updated Jun 17, 2026•1•0•4

This rule detects the creation or modification of files with specific SHA256 hashes known to be associated with adware. It monitors device file events for these hashes and logs instances where they are created or modified.