
Rule Info
Name
RedCurl Powershell Command
Author
X__Junior
Description
Detects PowerShell command seen used by RedCurl APT
Date
2025-01-08 00:00:00
Modified
None
Id
a6b9258d-07e6-438e-b7d5-5949b97ac72c
Tags
attack.discovery
Type
Nextron Sigma feed only (private)