SynkLoader Recon: PowerShell Host/AD/Process Enumeration Chain

Emiliano Mema@Nosalva

•updated Aug 28, 2026•0•0•4

Detects reconnaissance patterns associated with SynkLoader, specifically focusing on in-memory PowerShell execution used to harvest system information, user privileges, running services, process listings, and Active Directory computer counts.