Swachchhanda Shrawan Poudel
1e41c5378e
remove: PowerShell Web Download - deprecate duplicate rule in favour of 9fc51a3c-81b3-4fa7-b35f-7c02cf10fd2d update: PowerShell Script With File Upload Capabilities - add invoke-restmethod cmdlet update: Change User Agents with WebRequest - add invoke-restmethod cmdlet update: Usage Of Web Request Commands And Cmdlets - add invoke-restmethod cmdlet update: Usage Of Web Request Commands And Cmdlets - ScriptBlock - add invoke-restmethod cmdlet update: Potential DLL File Download Via PowerShell Invoke-WebRequest - add invoke-restmethod cmdlet update: PowerShell Download and Execution Cradles - add invoke-restmethod cmdlet update: Suspicious Invoke-WebRequest Execution With DirectIP - add invoke-restmethod cmdlet update: Suspicious Invoke-WebRequest Execution - add powershell_ise update: Potential Data Exfiltration Activity Via CommandLine Tools - add invoke-restmethod cmdlet update: Obfuscated IP Download Activity - add invoke-restmethod cmdlet update: Suspicious PowerShell In Registry Run Keys - add invoke-restmethod cmdlet --------- Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
TBD