Skip to content
Threat Feed
Subscribe

Vendor

AutoIt

2 briefs RSS
high advisory

Renamed Automation Script Interpreter Detection

This rule identifies renamed Automation Script Interpreter processes, often used by malware written in AutoIt/AutoHotKey to evade detection by renaming the executable.

AutoIt +2 defense-evasion execution masquerading windows
2r 2t
high advisory

Detection of Windows AutoIt3 Execution

Detects execution of AutoIt3, a scripting language used for Windows GUI automation, often abused by attackers to automate malicious actions such as executing malware, potentially leading to unauthorized code execution and system compromise.

AutoIt3 scripting malware execution windows
2r 1t