Florian Roth 4470c2f893 PowerShell Suspicious Invocation > Sysmon

2017-03-12 17:11:05 +01:00

..

builtin

Rule: Rare Windows Service Installs

2017-03-08 19:09:34 +01:00

powershell

Suspicious PowerShell Invocation

2017-03-12 17:06:53 +01:00

sysmon

PowerShell Suspicious Invocation > Sysmon

2017-03-12 17:11:05 +01:00