Hide Navigation Hide TOC Suspicious Use of CSharp Interactive Console (a9e416a8-e613-4f8b-88b8-a7d1d1af2f61) Detects the execution of CSharp interactive console by PowerShell Cluster A Galaxy A Cluster B Galaxy B Level Suspicious Use of CSharp Interactive Console (a9e416a8-e613-4f8b-88b8-a7d1d1af2f61) Sigma-Rules Trusted Developer Utilities Proxy Execution - T1127 (ff25900d-76d5-449b-a351-8824e62fc81b) Attack Pattern 1