Potential Binary Proxy Execution Via VSDiagnostics.EXE
Detects execution of "VSDiagnostics.exe" with the "start" or "launch" command-line arguments to proxy the execution of arbitrary binaries. This technique can be used by adversaries to bypass defenses by leveraging a legitimate, signed Microsoft binary.
Sigma
