Troubleshooting Pack Cmdlet Execution

심각도 보통 Sigma 탐지 룰. Detects execution of "TroubleshootingPack" cmdlets to leverage CVE-2022-30190 or action similar to "msdt" lolbin (as described in LOLBAS)

관련 CVE: CVE-2022-30190

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본