Potential Startup Shortcut Persistence Via PowerShell.EXE

심각도 높음 Sigma 탐지 룰. Detects PowerShell writing startup shortcuts. This procedure was highlighted in Red Canary Intel Insights Oct. 2021, "We frequently observe …

작성자: Christopher Peacock '@securepeacock', SCYTHE · 원본 라이선스: DRL 1.1 · SigmaHQ 원본