All Detections

Suspicious Invoke-WebRequest Execution With DirectIP

avatar
SigmaHQ Detections@sigmaHQ
updated Jul 28, 2025000

Detects calls to PowerShell with Invoke-WebRequest cmdlet using direct IP access

Sigma