Potential exploitation of CVE-2025-59287
This query looks for PowerShell launched by WSUS-related processes, especially with encoded or suspicious commands, which aligns with observed exploitation patterns
Microsoft Sentinel (KQL)
This query looks for PowerShell launched by WSUS-related processes, especially with encoded or suspicious commands, which aligns with observed exploitation patterns
Already have an account?