Improve DLL hijacking rule coverage

DataDog / guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Apache License 2.0

585 stars 43 forks source link

Closed ikretz closed 2 months ago

ikretz commented 2 months ago

This PR improves the coverage of the DLL hijacking rules by adding patterns to match strings resembling various Windows commands for executing DLLs.