All Detections

Obfuscated PowerShell OneLiner Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects the execution of a specific OneLiner to download and execute powershell modules in memory.

Sigma