Hunting Crowdstrike ScriptControl

Oussama AZRARA@oazrara

•updated Jun 25, 2026•6•0•19

This query hunts for malicious scripts that are logged on Crowdstrike EDR telemetry via the event type: ScriptControl