feat(rules): New `CldApi DLL loaded by an unusual process` rule#678

Merged

rabbitstack merged 1 commit into

Jul 6, 2026

Annotations

10 errors

undefined: NtQueryObject

undefined: syscall.UTF16PtrFromString

undefined: GetMappedFileName

undefined: pathIsDirectory

undefined: SymFromAddr

undefined: SymGetModuleInfo

undefined: utf16.Decode

could not import golang.org/x/sys/windows/registry (invalid package name: "")

could not import golang.org/x/sys/windows/svc (invalid package name: "")

could not import golang.org/x/sys/windows (invalid package name: "")