Malicious PowerShell Commandlets - ScriptBlock

심각도 높음 Sigma 탐지 룰. Detects Commandlet names from well-known PowerShell exploitation frameworks

관련 CVE: CVE-2021-1675

작성자: Sean Metcalf, Florian Roth, Bartlomiej Czyz @bczyz1, oscd.community, Nasreddine Bencherchali, Tim Shelton, Mustafa Kaan Demir, Georg Lauenstein, Max Altgelt, Tobias Michalski, Austin Songer · 원본 라이선스: DRL 1.1 · SigmaHQ 원본