C# IL Code Compilation Via Ilasm.EXE (850d55f9-6eeb-4492-ad69-a72338f65ba4)
Detects the use of "Ilasm.EXE" in order to compile C# intermediate (IL) code to EXE or DLL.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Trusted Developer Utilities Proxy Execution - T1127 (ff25900d-76d5-449b-a351-8824e62fc81b) | Attack Pattern | C# IL Code Compilation Via Ilasm.EXE (850d55f9-6eeb-4492-ad69-a72338f65ba4) | Sigma-Rules | 1 |