by rdsouza | Jul 5, 2021
Koadic Execution 5cddf373-ef00-4112-ad72-960ac29bac34
by rdsouza | Jul 5, 2021
Suspicious Scripting in a WMI Consumer fe21810c-2a8c-478f-8dd3-5a287fb2a0e0
by rdsouza | Jul 5, 2021
Exchange PowerShell Snap-Ins Used by HAFNIUM 25676e10-2121-446e-80a4-71ff8506af47
by rdsouza | Jul 5, 2021
WScript or CScript Dropper cea72823-df4d-4567-950c-0b579eaf0846
by rdsouza | Jul 5, 2021
QBot Process Creation 4fcac6eb-0287-4090-8eea-2602e4c20040
