All Detections

Potential Binary Proxy Execution Via VSDiagnostics.EXE

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects execution of "VSDiagnostics.exe" with the "start" command in order to launch and proxy arbitrary binaries.

Sigma