All Detections

HackTool - SharpEvtMute DLL Load

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026002

Detects the load of EvtMuteHook.dll, a key component of SharpEvtHook, a tool that tampers with the Windows event logs

Sigma