Potential Persistence Via Scrobj.dll COM Hijacking

SigmaHQ Detections@sigmaHQ

•updated Aug 17, 2023•0•0•2

Detect use of scrobj.dll as this DLL looks for the ScriptletURL key to get the location of the script to execute