refactor(rules): Improve Activity from unhooked NTDLL module rule#638

Merged

rabbitstack merged 1 commit into

Mar 4, 2026

Annotations

10 errors

undefined: GetDeviceDriverFileName

undefined: syscall.MAX_PATH

undefined: EnumDeviceDrivers

undefined: SymFromAddr

undefined: SymGetModuleInfo

undefined: utf16.Decode

could not import golang.org/x/sys/windows/registry (invalid package name: "")

could not import golang.org/x/sys/windows/svc (invalid package name: "")

could not import golang.org/x/sys/windows (invalid package name: "")