attack.t1216.001 | Detection.FYI

Launch-VsDevShell.PS1 Proxy Execution

Aug 12, 2024 · attack.defense-evasion attack.t1216.001 ·
Share on:

Detects the use of the 'Launch-VsDevShell.ps1' Microsoft signed script to execute commands.

Read More
Pubprn.vbs Proxy Execution

Aug 12, 2024 · attack.defense-evasion attack.t1216.001 ·
Share on:

Detects the use of the 'Pubprn.vbs' Microsoft signed script to execute commands.

Read More