Set custom UserAgent and download file via Powershell

Set Custom UserAgent and download file via Powershell

Sigma rule (View on GitHub)

 1title: Set custom UserAgent and download file via Powershell 
 2status: experimental
 3description: Set Custom UserAgent and download file via Powershell
 4author: Joe Security
 5date: 2023-05-30
 6id: 200111
 7threatname:
 8behaviorgroup: 1
 9classification: 8
10logsource:
11    category: process_creation
12    product: windows
13detection:
14    selection:
15        CommandLine:
16            - '*user-agent*.downloadfile(*'
17    condition: selection
18level: critical
to-top