Network Connection Initiated By PowerShell Process

심각도 낮음 Sigma 탐지 룰. Detects a network connection that was initiated from a PowerShell process. Often times malicious powershell scripts download additional payl…

작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본