All Detections

PowerShell Called from an Executable Version Mismatch

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202505

Detects PowerShell called from an executable by the version mismatch method

Sigma