powershell | Detection.FYI

powershell_script

Apr 16, 2025 ·
Share on:

Read More
powershell_module

Mar 4, 2025 ·
Share on:

Read More
powershell_classic

Mar 4, 2025 ·
Share on:

Read More

Recent Posts

Suspicious CrushFTP Child Process
Suspicious Process Spawned by CentreStack Portal AppPool
Exploitation Attempt Of CVE-2020-1472 - Execution of ZeroLogon PoC
Hiding User Account Via SpecialAccounts Registry Key - CommandLine
Obfuscated PowerShell OneLiner Execution
Potential Defense Evasion Activity Via Emoji Usage In CommandLine - 1
Potential Defense Evasion Activity Via Emoji Usage In CommandLine - 2
Potential Defense Evasion Activity Via Emoji Usage In CommandLine - 3

Language

SIGMA 3914 ELASTIC 1358 MQL 602

Tags

ATTACK.DEFENSE-EVASION 1285 RESOURCES-INVESTIGATION-GUIDE 1284 USE-CASE-THREAT-DETECTION 940 DOMAIN-ENDPOINT 836 ATTACK.EXECUTION 835 DATA-SOURCE-ELASTIC-DEFEND 686 ATTACK.PERSISTENCE 571 OS-WINDOWS 448 DATA-SOURCE-ELASTIC-ENDGAME 389 ATTACK.PRIVILEGE-ESCALATION 377 DETECTION.EMERGING-THREATS 368 OS-LINUX 345 TACTIC-DEFENSE-EVASION 335 DATA-SOURCE-SENTINELONE 307