Arbitrary DLL or Csproj Code Execution Via Dotnet.EXE (d80d5c81-04ba-45b4-84e4-92eba40e0ad3)
Detects execution of arbitrary DLLs or unsigned code via a ".csproj" files via Dotnet.EXE.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Arbitrary DLL or Csproj Code Execution Via Dotnet.EXE (d80d5c81-04ba-45b4-84e4-92eba40e0ad3) | Sigma-Rules | System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) | Attack Pattern | 1 |