avatar

Bryant Smith

@flowstate
Trusted contributorCompletionist
3 followers678 downloads310 copies7 likes12,516 views

91 detections

Detects PowerShell commands checking for low system memory (specifically less than 3GB), a common anti-sandbox technique used by the DeadVax campaign to evade analysis environments.
avatar
Bryant Smith@flowstate
avatar
DetectCON Securonix Workshop Ninjas
8 months ago
0030
Page 10 of 10