PowerShell Execution With Potential Decryption Capabilities

SigmaHQ Detections@sigmaHQ

•updated Oct 1, 2024•0•0•0

Detects PowerShell commands that decrypt an ".LNK" "file to drop the next stage of the malware.