powershell | Detection.FYI

powershell_module

Feb 23, 2024 ·
Share on:

Read More
powershell_script

Feb 23, 2024 ·
Share on:

Read More

Recent Posts

Using explorer.exe to open a file explorer folder via command prompt
Privileged User Has Been Created
Forest Blizzard APT - Process Creation Activity
HackTool - Dumpert Process Dumper Execution
ManageEngine Endpoint Central Dctask64.EXE Potential Abuse
Renamed ZOHO Dctask64 Execution
Potentially Suspicious Volume Shadow Copy Vsstrace.dll Load
Azure Login Bypassing Conditional Access Policies

Language

SIGMA 3903 ELASTIC 1282 MQL 521

Tags

ATTACK.DEFENSE-EVASION 1272 RESOURCES-INVESTIGATION-GUIDE 1209 USE-CASE-THREAT-DETECTION 891 ATTACK.EXECUTION 830 DOMAIN-ENDPOINT 807 DATA-SOURCE-ELASTIC-DEFEND 650 ATTACK.PERSISTENCE 571 OS-WINDOWS 444 DATA-SOURCE-ELASTIC-ENDGAME 383 ATTACK.PRIVILEGE-ESCALATION 373 DETECTION.EMERGING-THREATS 331 TACTIC-DEFENSE-EVASION 325 OS-LINUX 312 DATA-SOURCE-SENTINELONE 301