Rule Info
Name
Malicious PowerShell Scripts - PoshModule
Description
Detects the execution of known offensive powershell scripts used for exploitation or reconnaissance
Modified
None
Date
2023-01-23 00:00:00
Author
frack113, Nasreddine Bencherchali
Tags
attack.execution DEMO attack.t1059.001
Id
41025fd7-0466-4650-a813-574aaacbe7f4
Type
Community Rule
Link to Public Repo
Rule History
Author
Commit
Title
Date
Scan your endpoints, forensic images or collected files with our portable scanner THOR