PowerShell Execution of Registry-Resident Payload
Detects PowerShell retrieving, decoding, and executing a payload stored inside the Windows registry.
Sigma
Detects PowerShell retrieving, decoding, and executing a payload stored inside the Windows registry.
Already have an account?