Potential Process Execution Proxy Via CL_Invocation.ps1

심각도 보통 Sigma 탐지 룰. Detects calls to "SyncInvoke" that is part of the "CL_Invocation.ps1" script to proxy execution using "System.Diagnostics.Process"

작성자: Nasreddine Bencherchali (Nextron Systems), oscd.community, Natalia Shornikova · 원본 라이선스: DRL 1.1 · SigmaHQ 원본