host-interaction/process/terminate
rule:
meta:
name: terminate process by name in .NET
namespace: host-interaction/process/terminate
authors:
- anushka.virgaonkar@mandiant.com
scopes:
static: function
dynamic: thread
features:
- and:
- api: System.Diagnostics.Process::GetProcessesByName
- api: System.Diagnostics.Process::Kill
last edited: 2023-11-24 10:34:28