Enabling COR Profiler Environment Variables

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects .NET Framework CLR and .NET Core CLR "cor_enable_profiling" and "cor_profiler" variables being set and configured.