Skip to content

Hide Navigation Hide TOC

HackTool - Covenant PowerShell Launcher (c260b6db-48ba-4b4a-a76f-2f67644e99d2)

Detects suspicious command lines used in Covenant luanchers

Cluster A Galaxy A Cluster B Galaxy B Level
HackTool - Covenant PowerShell Launcher (c260b6db-48ba-4b4a-a76f-2f67644e99d2) Sigma-Rules PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) Attack Pattern 1
HackTool - Covenant PowerShell Launcher (c260b6db-48ba-4b4a-a76f-2f67644e99d2) Sigma-Rules Hidden Window - T1564.003 (cbb66055-0325-4111-aca0-40547b6ad5b0) Attack Pattern 1
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736) Attack Pattern Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 2
Hide Artifacts - T1564 (22905430-4901-4c2a-84f6-98243cb173f8) Attack Pattern Hidden Window - T1564.003 (cbb66055-0325-4111-aca0-40547b6ad5b0) Attack Pattern 2