All Detections

Remote Thread Creation Via PowerShell In Uncommon Target

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects the creation of a remote thread from a Powershell process in an uncommon target process

Sigma