PowerShell Anti-Sandbox/Anti-VM Checks Before Payload Deployment

Ibrahim Saud@tektrix

•updated 19 days ago•1•0•1

Detects the execution of PowerShell commands that attempt to retrieve hardware and OS-level system information using WMI queries or API-like indicators commonly used by reconnaissance tools.