All Detections

APT29

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025107

This method detects a suspicious PowerShell command line combination as used by APT29 in a campaign against U.S. think tanks.

Sigma