Kazuar Worker Loads a Capability Plug-In on Demand
Detects a persistent module loading a previously unseen DLL from its task or plug-in directory after local IPC activity. This behavior is associated with the Kazuar malware.
Splunk (SPL)
Detects a persistent module loading a previously unseen DLL from its task or plug-in directory after local IPC activity. This behavior is associated with the Kazuar malware.
Already have an account?