Suspicious Invoke-WebRequest Execution
Detects a suspicious call to Invoke-WebRequest cmdlet where the and output is located in a suspicious location
Sigma

Detects a suspicious call to Invoke-WebRequest cmdlet where the and output is located in a suspicious location

Already have an account?