Notepad++ Installer Making External Network Connection

Last updated on:

In this page

About the rule

Rule Type

Standard

Rule Description

Detects a Notepad++ installer initiating outbound network connections, which is not expected during normal update execution and may indicate supply-chain compromise.

Severity

Critical

Detection

Execution Mode

realtime

Log Sources

Windows