Visual Basic Command Line Compiler Spawning Resource Converter
Detects the execution of the Visual Basic Command Line Compiler (vbc.exe) where it acts as a parent process to the Windows Resource to Object Converter (cvtres.exe). This combination indicates successful code compilation, which can be abused by adversaries to compile malicious code on a compromised system.
Sigma
