VBScript host execution via wscript.exe/cscript.exe for reconnaissance
Detects the execution of wscript.exe or cscript.exe which are commonly used to execute VBScript files for performing host reconnaissance tasks such as process enumeration via WMI and file system discovery using Scripting.FileSystemObject.
YARA-L
