description: The following analytic detects suspicious PowerShell activity via EventCode 4104, where WMI performs event queries to gather information on running processes or services. This detection ...
Version Info: (please note: this package is still in a development state with frequent modifications) please check the release notes. Typical usage of the basic MagPy package for reading and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results