Skip to content

Hide Navigation Hide TOC

PowerShell ShellCode (16b37b70-6fcf-4814-a092-c36bd3aafcbd)

Detects Base64 encoded Shellcode

Cluster A Galaxy A Cluster B Galaxy B Level
PowerShell ShellCode (16b37b70-6fcf-4814-a092-c36bd3aafcbd) Sigma-Rules Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) Attack Pattern 1
PowerShell ShellCode (16b37b70-6fcf-4814-a092-c36bd3aafcbd) Sigma-Rules PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) Attack Pattern 1
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2