Search and filter across all detection sources
230 rules
Driver Load - kavservice.bin
Detects loading of driver kavservice.bin via name.
Detects loading of driver kavservice.bin via hash.
Driver Load - prokiller64.sys
Detects loading of driver prokiller64.sys via name. Signed POORTRY Samples
Detects loading of driver prokiller64.sys via hash. Signed POORTRY Samples
Driver Load - NQrmq.sys
Detects loading of driver NQrmq.sys via name. Found via RichPEHeaderHash pivoting.
Detects loading of driver NQrmq.sys via hash. Found via RichPEHeaderHash pivoting.
Driver Load - 2.sys
Detects loading of driver 2.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver 2.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - 7.sys
Detects loading of driver 7.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver 7.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - NodeDriver.sys
Detects loading of driver NodeDriver.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver NodeDriver.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - PcieCubed.sys
Detects loading of driver PcieCubed.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver PcieCubed.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - POORTRY1.sys
Detects loading of driver POORTRY1.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver POORTRY1.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - POORTRY2.sys
Detects loading of driver POORTRY2.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver POORTRY2.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - POORTRY.sys
Detects loading of driver POORTRY.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver POORTRY.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - Sense5Ext.sys
Detects loading of driver Sense5Ext.sys via name. Driver categorized as POORTRY by Mandiant.
Detects loading of driver Sense5Ext.sys via hash. Driver categorized as POORTRY by Mandiant.
Driver Load - mimikatz.sys
Detects loading of driver mimikatz.sys via name. Confirmed vulnerable driver from Microsoft Block List
Detects loading of driver mimikatz.sys via hash. Confirmed vulnerable driver from Microsoft Block List
Driver Load - mlgbbiicaihflrnh.sys
Detects loading of driver mlgbbiicaihflrnh.sys via name. Confirmed vulnerable driver from Microsoft Block List