All Detections

Disable Powershell Command History

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects scripts or commands that disabled the Powershell command history by removing psreadline module

Sigma