H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMitigation
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

Microsoft's Enhanced Mitigation Experience Toolkit (EMET) Attack Surface Reduction (ASR) feature can be used to block methods of using rundll32.exe to bypass whitelisting. (Citation: Secure Host Baseline EMET)

0 recorded

Relationships

No relationships recorded.

2 external

References

mitre-attack
T1085
open
Secure Host Baseline EMET
https://github.com/iadgov/Secure-Host-Baseline/tree/master/EMET
open