Registry-Free Process Scope COR_PROFILER
심각도 보통 Sigma 탐지 룰. Adversaries may leverage the COR_PROFILER environment variable to hijack the execution flow of programs that load the .NET CLR. The COR_PROF…
작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 보통 Sigma 탐지 룰. Adversaries may leverage the COR_PROFILER environment variable to hijack the execution flow of programs that load the .NET CLR. The COR_PROF…
작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본