Rule Library

Sigma Rules

1 rule found for "Michael R."

3,707Total

3,116Detection

451Emerging

137Hunting

Filters

Type

Severity

Status

Product

Category

Detectionhightest

Suspicious Use of CSharp Interactive Console

Detects the execution of CSharp interactive console by PowerShell

WindowsProcess Creation

TA0002 · ExecutionTA0005 · Defense EvasionT1127 · Trusted Developer Utilities Proxy Execution

Michael R.Sun Mar 08windows