PowerShell Core DLL Loaded By Non PowerShell Process

심각도 보통 Sigma 탐지 룰. Detects loading of essential DLLs used by PowerShell by non-PowerShell process. Detects behavior similar to meterpreter's "load powershell" …

작성자: Tom Kern, oscd.community, Natalia Shornikova, Tim Shelton, Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본