Uncommon CDB Child Processes

Rule Info

Name

Uncommon CDB Child Processes

Author

X__Junior

Description

Detects Uncommon child processes spawned by Microsoft Console Debugger

Reference

https://www.elastic.co/security-labs/fragile-web-ref7707

Date

2025-02-27 00:00:00

Modified

None

Id

4b5afbe2-7be1-4bbd-9bd8-fdc54a5b4be9

Tags

attack.defense-evasion

Type

Nextron Sigma feed only (private)

Rule History