Potential Binary Proxy Execution Via Cdb.EXE

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects usage of "cdb.exe" to launch arbitrary processes or commands from a debugger script file