by rdsouza | Jul 1, 2021
T1086 PowerShell Execution ac7102b4-9e1e-4802-9b4f-17c5524c015c
by rdsouza | Jul 1, 2021
Remote PowerShell Sessions CAR-2014-11-004
by rdsouza | Jul 1, 2021
Powershell Execution CAR-2014-04-003
by rdsouza | Jul 1, 2021
Schedule Task with HTTP Command Arguments 523c2684-a101-11eb-916b-acde48001122
by rdsouza | Jul 1, 2021
WinEvent Scheduled Task Created Within Public Path 5d9c6eee-988c-11eb-8253-acde48001122
