All Detections

Base64 Encoded PowerShell Command Detected

avatar
Google SecOps@GoogleSecOps
updated Jun 6, 2025000

Detects usage of the \"FromBase64String\" function in the commandline which is used to decode a base64 encoded string

YARA-L