Rule Library
Sigma Rules
2 rules found for "@_felamos"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Arbitrary DLL or Csproj Code Execution Via Dotnet.EXE
Detects execution of arbitrary DLLs or unsigned code via a ".csproj" files via Dotnet.EXE.
WindowsProcess Creation
Beyu Denis+1Sun Oct 18windows
Detectionhightest
Devtoolslauncher.exe Executes Specified Binary
The Devtoolslauncher.exe executes other binary
WindowsProcess Creation
Beyu Denis+2Sat Oct 12windows