Potential In-Memory Execution Using Reflection.Assembly (ddcd88cb-7f62-4ce5-86f9-1704190feb0a)
Detects usage of "Reflection.Assembly" load functions to dynamically load assemblies in memory
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Potential In-Memory Execution Using Reflection.Assembly (ddcd88cb-7f62-4ce5-86f9-1704190feb0a) | Sigma-Rules | Reflective Code Loading - T1620 (4933e63b-9b77-476e-ab29-761bc5b7d15a) | Attack Pattern | 1 |