search

cuckoosandbox / community

Repository of modules and signatures contributed by the community
324 stars 175 forks source link

Safelisting powershell in signatures due to FPs #504

Closed cccs-kevin closed 2 years ago

cccs-kevin commented 3 years ago

Pretty crazy, if you run a PowerShell file, regardless of what it does, these signatures will be always be raised. This PR is aimed at fixing that.