security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: fp with powercat

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2023-01-21 18:15:37 +01:00
parent 63045048e3
commit ecaf89dd91
3 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/powershell/powershell_script/posh_ps_malicious_commandlets.yml
+2 -2
View File
@@ -29,7 +29,7 @@ references:
- https://github.com/besimorhino/powercat
author: Sean Metcalf, Florian Roth, Bartlomiej Czyz @bczyz1, oscd.community, Nasreddine Bencherchali, Tim Shelton, Mustafa Kaan Demir, Georg Lauenstein, Max Altgelt, Tobias Michalski, Austin Songer
date: 2017/03/05
modified: 2023/01/20
modified: 2023/01/21
tags:
- attack.execution
- attack.discovery
@@ -198,7 +198,7 @@ detection:
- 'Out-Minidump'
- 'Port-Scan'
- 'PowerBreach'
- 'powercat'
- 'powercat '
- 'PowerUp'
- 'PowerView'
- 'Remove-Update'