Potential WinAPI Calls Via PowerShell Scripts

심각도 높음 Sigma 탐지 룰. Detects usage of WinAPI functions in PowerShell scripts. It may indicate attempts to perform actions such as process injection, token steali…

작성자: Nasreddine Bencherchali (Nextron Systems), Nikita Nazarov, oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본