hightestEmerging Threat
Potential PlugX Activity
Detects the execution of an executable that is typically used by PlugX for DLL side loading starting from an uncommon location
windowsprocess_creation
2023-02-03
PlugX is tracked here as a malware family or toolset with 1 Sigma detection spanning 2017. Coverage centers on windows / process_creation.
Detects the execution of an executable that is typically used by PlugX for DLL side loading starting from an uncommon location