Potential Remote PowerShell Session Initiated

심각도 높음 Sigma 탐지 룰. Detects a process that initiated a network connection over ports 5985 or 5986 from a non-network service account. This could potentially ind…

작성자: Roberto Rodriguez @Cyb3rWard0g · 원본 라이선스: DRL 1.1 · SigmaHQ 원본