All Detections

Cisco Umbrella - Windows PowerShell User-Agent Detected

Azure Sentinel@AzureSentinel
updated Jun 17, 20254021

'Rule helps to detect Powershell user-agent activity by an unusual process other than a web browser.'

Microsoft Sentinel (KQL)