hightestEmerging Threat
Potential NetWire RAT Activity - Registry
Detects registry keys related to NetWire RAT
windowsregistry_add
2025-11-03
Rule Library
Sigma Rules
Browse detections by severity and log source, with YAML and sample events one click away.
3,782Total
3,164Detection
474Emerging
141Hunting
hightestEmerging Threat
Injected Browser Process Spawning Rundll32 - GuLoader Activity
Detects the execution of installed GuLoader malware on the host. GuLoader is initiating network connections via the rundll32.exe process that is spawned via a browser parent(injected) process.
windowsprocess_creation
2023-08-07