Potential Binary Proxy Execution Via Cdb.EXE (b5c7395f-e501-4a08-94d4-57fe7a9da9d2)

Detects usage of "cdb.exe" to launch arbitrary processes or commands from a debugger script file

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Native API - T1106 (391d824f-0ef1-47a0-b0ee-c59a75e27670)	Attack Pattern	Potential Binary Proxy Execution Via Cdb.EXE (b5c7395f-e501-4a08-94d4-57fe7a9da9d2)	Sigma-Rules	1
Potential Binary Proxy Execution Via Cdb.EXE (b5c7395f-e501-4a08-94d4-57fe7a9da9d2)	Sigma-Rules	System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	1
Potential Binary Proxy Execution Via Cdb.EXE (b5c7395f-e501-4a08-94d4-57fe7a9da9d2)	Sigma-Rules	Trusted Developer Utilities Proxy Execution - T1127 (ff25900d-76d5-449b-a351-8824e62fc81b)	Attack Pattern	1