Pubprn.vbs Proxy Execution (1fb76ab8-fa60-4b01-bddd-71e89bf555da)

Detects the use of the 'Pubprn.vbs' Microsoft signed script to execute commands.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
PubPrn - T1216.001 (09cd431f-eaf4-4d2a-acaf-2a7acfe7ed58)	Attack Pattern	Pubprn.vbs Proxy Execution (1fb76ab8-fa60-4b01-bddd-71e89bf555da)	Sigma-Rules	1
System Script Proxy Execution - T1216 (f6fe9070-7a65-49ea-ae72-76292f42cebe)	Attack Pattern	PubPrn - T1216.001 (09cd431f-eaf4-4d2a-acaf-2a7acfe7ed58)	Attack Pattern	2