All Detections

PowerShell Web Access Feature Enabled Via DISM

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025011

Detects the use of DISM to enable the PowerShell Web Access feature, which could be used for remote access and potential abuse

Sigma