Hidden Powershell in Link File Pattern
Detects events that appear when a user click on a link file with a powershell command in it
Sigma

Detects events that appear when a user click on a link file with a powershell command in it

Already have an account?