All Detections

AsyncRAT - PGP Private Key Block Decryption

avatar
Ibrahim Saud@tektrix
updated Jun 20, 2026004

Parses PowerShell command lines to identify scripts extracting PGP private key blocks from arbitrary files to decode nested stagers.

Microsoft Sentinel (KQL)