Restoration of Windows Script Host
Detects modifications to the registry re-enabling Windows Script Host to execute VBS payloads, often associated with malware like AsyncRAT.
Microsoft Sentinel (KQL)
Detects modifications to the registry re-enabling Windows Script Host to execute VBS payloads, often associated with malware like AsyncRAT.
Already have an account?