Script Event Consumer Spawning Process (f6d1dd2f-b8ce-40ca-bc23-062efb686b34)
Detects a suspicious child process of Script Event Consumer (scrcons.exe).
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Script Event Consumer Spawning Process (f6d1dd2f-b8ce-40ca-bc23-062efb686b34) | Sigma-Rules | Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055) | Attack Pattern | 1 |