Powershell Executed From Headless ConHost Process

심각도 보통 Sigma 탐지 룰. Detects the use of powershell commands from headless ConHost window. The "--headless" flag hides the windows from the user upon execution.

작성자: Matt Anderson (Huntress) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본