Daxin srt64.sys kernel driver install or service creation

Ethan Andrews@eandrews

•updated Jul 16, 2026•2•0•9

Detects the installation of the srt64.sys kernel driver, associated with the Daxin rootkit. The detection monitors for the creation of this specific file within the System32\drivers directory and the creation of services referencing the driver file.