Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

87 detections

Detects a threat actor creating a file named `iertutil.dll` in the `C:\Program Files\Internet Explorer\` directory over the network for a DCOM InternetExplorer DLL Hijack scenario.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
000
Detects potential DLL hijack of "iertutil.dll" found in the DCOM InternetExplorer.Application Class over the network
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
000
Detects potential DLL hijack of "iertutil.dll" found in the DCOM InternetExplorer.Application Class
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
000
Page 5 of 5