All Detections

APT29

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

This method detects a suspicious PowerShell command line combination as used by APT29 in a campaign against U.S. think tanks.

Sigma