Hide Navigation Hide TOC SyncAppvPublishingServer VBS Execute Arbitrary PowerShell Code (36475a7d-0f6d-4dce-9b01-6aeb473bbaf1) Executes arbitrary PowerShell code using SyncAppvPublishingServer.vbs Cluster A Galaxy A Cluster B Galaxy B Level System Script Proxy Execution - T1216 (f6fe9070-7a65-49ea-ae72-76292f42cebe) Attack Pattern SyncAppvPublishingServer VBS Execute Arbitrary PowerShell Code (36475a7d-0f6d-4dce-9b01-6aeb473bbaf1) Sigma-Rules 1 SyncAppvPublishingServer VBS Execute Arbitrary PowerShell Code (36475a7d-0f6d-4dce-9b01-6aeb473bbaf1) Sigma-Rules System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern 1