Sunburst – SolarWinds starts PowerShell with Base64
Exploited SolarWinds process starting PowerShell with base64 in the command line.
SentinelOne

Exploited SolarWinds process starting PowerShell with base64 in the command line.

Already have an account?