WinAPI Function Calls Via PowerShell Scripts

심각도 보통 Sigma 탐지 룰. Detects calls to WinAPI functions from PowerShell scripts. Attackers can often leverage these APIs to avoid detection based on typical Power…

작성자: Nikita Nazarov, oscd.community, Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본