Closed frack113 closed 1 month ago
Rule match on all Get-ChildItem without the |all
Get-ChildItem
|all
update: Forest Blizzard APT - Process Creation Activity
Summary of the Pull Request
Rule match on all
Get-ChildItem
without the|all
Changelog
update: Forest Blizzard APT - Process Creation Activity
Example Log Event
Fixed Issues
SigmaHQ Rule Creation Conventions