mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-28 21:22:07 +02:00
@@ -15,8 +15,6 @@ Commands:
|
||||
- Execute: DLL (.NET)
|
||||
Full_Path:
|
||||
- Path: C:\Windows\diagnostics\system\Audio\CL_LoadAssembly.ps1
|
||||
Code_Sample:
|
||||
- Code:
|
||||
Detection:
|
||||
- Sigma: https://github.com/SigmaHQ/sigma/blob/ff6c54ded6b52f379cec11fe17c1ccb956faa660/rules/windows/process_creation/proc_creation_win_lolbas_cl_loadassembly.yml
|
||||
Resources:
|
||||
|
Reference in New Issue
Block a user