Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
1
Platforms
1
MITRE Techniques
18,184
15,755
12,677
8,491
6,305
Detects the execution pattern associated with the TAIDOOR RAT malware loading its DLL component. Specifically, it looks for command-line arguments containing 'dll,MyStart' or 'dll MyStart' in conjunction with 'rundll32.exe', which is a known method for TAIDOOR to load its malicious DLL.
