Potential Manage-bde.wsf Abuse To Proxy Execution (c363385c-f75d-4753-a108-c1a8e28bdbda)
Detects potential abuse of the "manage-bde.wsf" script as a LOLBIN to proxy execution
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
System Script Proxy Execution - T1216 (f6fe9070-7a65-49ea-ae72-76292f42cebe) | Attack Pattern | Potential Manage-bde.wsf Abuse To Proxy Execution (c363385c-f75d-4753-a108-c1a8e28bdbda) | Sigma-Rules | 1 |