All Detections

Nslookup PowerShell Download Cradle

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025108

Detects a powershell download cradle using nslookup. This cradle uses nslookup to extract payloads from DNS records.

Sigma