Local Network Connection Initiated By Script Interpreter

SigmaHQ Detections@sigmaHQ

•updated May 31, 2024•0•0•0

Detects a script interpreter (Wscript/Cscript) initiating a local network connection to download or execute a script hosted on a shared folder.