All Detections

AI Impersonation Restart Manager Process Discovery

avatar
Ibrahim Saud@tektrix
updated Jun 21, 2026005

Identifies PowerShell utilizing rstrtmgr.dll to list processes, avoiding Get-Process.

YARA-L