Non Interactive PowerShell Process Spawned

심각도 낮음 Sigma 탐지 룰. Detects non-interactive PowerShell activity by looking at the "powershell" process with a non-user GUI process such as "explorer.exe" as a p…

작성자: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본