Suspicious C# Compilation GTIG HONESTCUE
Flags csc.exe invocations compiling from Temp/AppData paths, a practical pivot for GTIG-described malware that compiles C# code obtained at runtime (e.g., via LLM API responses).
Sigma
Flags csc.exe invocations compiling from Temp/AppData paths, a practical pivot for GTIG-described malware that compiles C# code obtained at runtime (e.g., via LLM API responses).
Already have an account?