host-interaction/process/terminate

terminate process by name in .NET

rule:
  meta:
    name: terminate process by name in .NET
    namespace: host-interaction/process/terminate
    authors:
      - anushka.virgaonkar@mandiant.com
    scopes:
      static: function
      dynamic: thread
  features:
    - and:
      - api: System.Diagnostics.Process::GetProcessesByName
      - api: System.Diagnostics.Process::Kill

last edited: 2023-11-24 10:34:28