Rule Library
Sigma Rules
2 rules found for "Jimmy Bayne"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Binary Proxy Execution Via Dotnet-Trace.EXE
Detects commandline arguments for executing a child process via dotnet-trace.exe
WindowsProcess Creation
Jimmy BayneTue Jan 02windows
Detectionmediumtest
Enabling COR Profiler Environment Variables
Detects .NET Framework CLR and .NET Core CLR "cor_enable_profiling" and "cor_profiler" variables being set and configured.
WindowsRegistry Set
Jose Rodriguez+2Thu Sep 10windows