Potential PowerShell Obfuscation Via Reversed Commands

심각도 높음 Sigma 탐지 룰. Detects the presence of reversed PowerShell commands in the CommandLine. This is often used as a method of obfuscation by attackers

작성자: Teymur Kheirkhabarov (idea), Vasiliy Burov (rule), oscd.community, Tim Shelton · 원본 라이선스: DRL 1.1 · SigmaHQ 원본