sysmon-modular icon indicating copy to clipboard operation
sysmon-modular copied to clipboard

Create include_powershell_profiles.xml

Open zbalkan opened this issue 11 months ago • 0 comments

Added PowerShell profile paths for "T1546.013 Event Triggered Execution: PowerShell Profile" detection

zbalkan avatar Nov 05 '24 09:11 zbalkan