Seedworm Staging Script nm.ps1 Execution

Ibrahim Saud@tektrix

•updated Jun 17, 2026•0•0•10

Detects the execution of a PowerShell script named 'nm.ps1', which has been associated with the Seedworm threat group for staging purposes. This rule specifically looks for 'nm.ps1' within process command lines.