Wscript Shell Run In CommandLine (2c28c248-7f50-417a-9186-a85b223010ee)
Detects the presence of the keywords "Wscript", "Shell" and "Run" in the command, which could indicate a suspicious activity
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Wscript Shell Run In CommandLine (2c28c248-7f50-417a-9186-a85b223010ee) | Sigma-Rules | Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) | Attack Pattern | 1 |