MITRE ATT&CK T1033 Recon Successful Logon Enumeration Powershell CISA Report

Google SecOps@GoogleSecOps

•updated Jun 2, 2025•0•0•1

Detects the use of powershell to enumerate successful logins on a specific host