Thanks @mubix Ported this snippet to C# and added the process MainModule location - good for identifying potential custom software which could be easily reversed on a red team👏gist.github.com/dtmsecurity/…
Super simple function, but super powerful Get-CSharpProcess -> gist.github.com/mubix/153615… Just looks at running processes and tells you which ones are written in C#

6:05 PM · Dec 1, 2020

2
8
32
Replying to @dtmsecurity @mubix
Not 100% sure but I remember mscoree sometimes not being loaded in .NET v2 processes and needing to look for clr.dll but could be wrong! Nice little recon script tho 👍
0
0
2