PowerShell Script With File Upload Capabilities (d2e3f2f6-7e09-4bf2-bc5d-90186809e7fb)
Detects PowerShell scripts leveraging the "Invoke-WebRequest" cmdlet to send data via either "PUT" or "POST" method.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| PowerShell Script With File Upload Capabilities (d2e3f2f6-7e09-4bf2-bc5d-90186809e7fb) | Sigma-Rules | Automated Exfiltration - T1020 (774a3188-6ba9-4dc4-879d-d54ee48a5ce9) | Attack Pattern | 1 |