feat(rules): New `Untrusted DLL loaded from masqueraded Windows directory` rule - #687

Merged

rabbitstack merged 1 commit into

Jul 2, 2026

Annotations

10 errors

undefined: NtQueryObject

undefined: syscall.UTF16PtrFromString

undefined: GetMappedFileName

undefined: pathIsDirectory

undefined: SymFromAddr

undefined: SymGetModuleInfo

undefined: utf16.Decode

could not import golang.org/x/sys/windows/registry (invalid package name: "")

could not import golang.org/x/sys/windows/svc (invalid package name: "")

could not import golang.org/x/sys/windows (invalid package name: "")