powershell_module | Detection.FYI

Invoke-ShareFinder Discovery Activity

Feb 23, 2024 · attack.discovery attack.t1135 ·
Share on:

Use of Invoke-ShareFinder detected via PowerShell logging

Read More
Enable WDigest using PowerShell (ps_module)

Jan 8, 2023 · attack.defense_evasion attack.t1112 ·
Share on:

Rule to detect registry modifications to enable WDigest using powershell script modules.

Read More