Run PowerShell Script from ADS

심각도 높음 Sigma 탐지 룰. Detects PowerShell script execution from Alternate Data Stream (ADS)

작성자: Sergey Soldatov, Kaspersky Lab, oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본