Nslookup PowerShell Download Cradle - ProcessCreation
Detects suspicious powershell download cradle using nslookup. This cradle uses nslookup to extract payloads from DNS records
Sigma
Detects suspicious powershell download cradle using nslookup. This cradle uses nslookup to extract payloads from DNS records
Already have an account?