LoFP LoFP / legitimate use of devtoolslauncher.exe by legitimate user

Techniques

Sample rules

Devtoolslauncher.exe Executes Specified Binary

Description

The Devtoolslauncher.exe executes other binary

Detection logic

condition: selection
selection:
  CommandLine|contains: LaunchForDeploy
  Image|endswith: \devtoolslauncher.exe