| suricata |
ET ATTACK_RESPONSE PowerShell Internet Connectivity Check via Network GUID Inbound |
rev 4 |
2024-12-12 |
| snort |
ET ATTACK_RESPONSE PowerShell Internet Connectivity Check via Network GUID Inbound |
rev 4 |
2024-12-12 |
| suricata |
ET MALWARE Wide HTA with PowerShell Execution Inbound |
rev 4 |
2024-03-07 |
| suricata |
ET MALWARE CSharp SMB Scanner Assembly in PowerShell Inbound M2 |
rev 4 |
2024-03-07 |
| suricata |
ET INFO Inbound PowerShell Capable of Enumerating Internal Network via WMI |
rev 4 |
2024-03-07 |
| suricata |
ET MALWARE Outbound POST Request with ps PowerShell Command Output |
rev 4 |
2020-09-01 |
| suricata |
ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M1 |
rev 3 |
2020-08-28 |
| suricata |
ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M2 |
rev 3 |
2020-08-28 |
| suricata |
ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M3 |
rev 3 |
2020-08-28 |
| snort |
ET TROJAN Outbound POST Request with ps PowerShell Command Output |
rev 3 |
2019-08-16 |
| snort |
ET CURRENT_EVENTS CSharp SMB Scanner Assembly in PowerShell Inbound M2 |
rev 2 |
2019-05-08 |
| snort |
ET POLICY Inbound PowerShell Capable of Enumerating Internal Network via WMI |
rev 2 |
2019-05-08 |
| snort |
ET CURRENT_EVENTS Wide HTA with PowerShell Execution Inbound |
rev 2 |
2019-05-08 |
| snort |
ET TROJAN Outbound POST Request with Base64 ps PowerShell Command Output M1 |
rev 2 |
2019-04-16 |
| snort |
ET TROJAN Outbound POST Request with Base64 ps PowerShell Command Output M2 |
rev 2 |
2019-04-16 |
| snort |
ET TROJAN Outbound POST Request with Base64 ps PowerShell Command Output M3 |
rev 2 |
2019-04-16 |