Update win_susp_powershell_enc_cmd.yml
This commit is contained in:
@@ -28,7 +28,7 @@ detection:
|
||||
- '-enc'
|
||||
selection4:
|
||||
- ' BA^J'
|
||||
- 'SUVYI'
|
||||
- ' SUVYI'
|
||||
- ' aWV4I'
|
||||
- ' SQBFAFgA'
|
||||
- ' aQBlAHgA'
|
||||
|
||||
Reference in New Issue
Block a user