Explicit Console Hiding Execution
Detects scripts combining AllocConsole and ConsoleWindowClass to explicitly hide application windows. This technique can be used by adversaries to conceal their malicious activity.
Microsoft Sentinel (KQL)

Detects scripts combining AllocConsole and ConsoleWindowClass to explicitly hide application windows. This technique can be used by adversaries to conceal their malicious activity.

Already have an account?