Suspicious Invoke-WebRequest Execution

Google SecOps@GoogleSecOps

•updated Jun 6, 2025•0•0•0

Detects a suspicious call to Invoke-WebRequest cmdlet where the and output is located in a suspicious location