feat(rules): New `Activity from unhooked NTDLL module` rule#589

Merged

rabbitstack merged 1 commit intomasterfrom

potential-ntdll-memory-tampering

Mar 1, 2026

Commits on Feb 2, 2026

feat(rules): Add Activity from unhooked NTDLL module rule
rabbitstack
committed