Rule Info
Name
Potential Data Exfiltration Via Powershell
Author
X__Junior
Description
Detects powershell commands that potentially performing data exfiltration.
Date
2025-02-27 00:00:00
Modified
None
Id
5d1afc85-fd26-4efd-8a67-614ec0c28899
Tags
attack.defense-evasion
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR