Suspicious Process Discovery With Get-Process (af4c87ce-bdda-4215-b998-15220772e993)
Get the processes that are running on the local computer.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Process Discovery - T1057 (8f4a33ec-8b1f-4b80-a2f6-642b2e479580) | Attack Pattern | Suspicious Process Discovery With Get-Process (af4c87ce-bdda-4215-b998-15220772e993) | Sigma-Rules | 1 |