3 ms·
I would imagine that it was just one of these “next gen” products that identified the fact that Powershell was running on a machine that normally would not run
by teilo 8y ago
I would imagine that it was just one of these “next gen” products that identified the fact that Powershell was running on a machine that normally would not run Powershell.
- raesene9 8y agoWhy would you need anything "next gen" for that? Just log use of powershell then have your good old SIEM system alert when it's used by a group outside of the IT dept.