fix EventID: 4104 ScriptBlockText

2021-08-04 14:49:50 +02:00
parent 28abe88927
commit f040725dd8
28 changed files with 35 additions and 13 deletions
@@ -14,6 +14,7 @@ tags:
 logsource:
    product: windows
    service: powershell
+    definition: 'Script block logging must be enabled'
 detection:
    selection:
        EventID: 4104