Rule Info
Name
Malicious PowerShell Scripts - PoshModule
Author
frack113, Nasreddine Bencherchali (Nextron Systems)
Description
Detects the execution of known offensive powershell scripts used for exploitation or reconnaissance
Date
2023-01-23 00:00:00
Modified
2024-01-25 00:00:00
Id
41025fd7-0466-4650-a813-574aaacbe7f4
Tags
attack.execution attack.t1059.001 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
github-actions[bot]
Merge PR #4611 from @nasbench - Promote Older Rules Status From `experimental` To `test`
2023-12-01
Nasreddine Bencherchali
feat: new rules, updates and goofy guineapig stuff (#4229)
2023-05-15
Scan your endpoints, forensic images or collected files with our portable scanner THOR