All Detections

PowerShell Base64 Encoded FromBase64String Cmdlet

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects usage of a base64 encoded "FromBase64String" cmdlet in a process command line

Sigma