COLDRIVER LOSTKEYS PowerShell Execution Detection

Aaron Mog@AaronMogS2S

•updated May 9, 2025•1•25

Detects suspicious PowerShell command lines often used in the initial stage of the COLDRIVER LOSTKEYS infection chain.