Malicious PowerShell Scripts - PoshModule
Detects the execution of known offensive powershell scripts used for exploitation or reconnaissance
Sigma

Detects the execution of known offensive powershell scripts used for exploitation or reconnaissance

Already have an account?