All Detections

Launch-VsDevShell.PS1 Proxy Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects the use of the 'Launch-VsDevShell.ps1' Microsoft signed script to execute commands.

Sigma