security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

title changed

Browse Source
This commit is contained in:
uncleP@sk
2020-10-13 16:24:52 +03:00
parent 62bb2bc272
commit 3d3efcd3db
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_susp_use_of_sqltoolsps_bin.yml
+1 -1
View File
@@ -1,4 +1,4 @@
title: Detection of PowerShell Execution via SQL client tools
title: SQL Client Tools PowerShell Session Detection
id: a746c9b8-a2fb-4ee5-a428-92bee9e99060
status: experimental
description: PowerShell execution through builtin SQL Server Management Studio "SQLToolsPS.exe" binary. Microsoft PS logging like