PowerShell Anti-Sandbox Memory Check

Bryant Smith@flowstate

•updated Mar 10, 2026•0•30

Detects PowerShell commands checking for low system memory (specifically less than 3GB), a common anti-sandbox technique used by the DeadVax campaign to evade analysis environments.