LogScale Queries

Query

Get ReflectiveDotnetModuleLoad with non-null ManagedPdbBuildPath field

LogScale · Detection & Monitoring · v2 · @sebastian · 24.7.2026

All Queries

Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Cool-Query-Friday/2023-09-08 - Cool Query Friday - Reflective .Net Module Loads and Program Database (PDB) File Paths.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Cool-Query-Friday/2023-09-08%20-%20Cool%20Query%20Friday%20-%20Reflective%20.Net%20Module%20Loads%20and%20Program%20Database%20%28PDB%29%20File%20Paths.md

DetectionWindows

Query contentv2

Download v2
Loading editor…

Version history

Every save keeps the previous content. Open any version to view or download it.

  1. v2current

    24.7.2026, 18:37:03

  2. v1

    24.7.2026, 18:24:35