description: The following analytic identifies instances where a shell (PowerShell.exe or Cmd.exe) is spawned from W3WP.exe, the IIS worker process. This detection leverages data from Endpoint ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results