New BITS Job Created Via PowerShell (fe3a2d49-f255-4d10-935c-bda7391108eb)
Detects the creation of a new bits job by PowerShell
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| BITS Jobs - T1197 (c8e87b83-edbb-48d4-9295-4974897525b7) | Attack Pattern | New BITS Job Created Via PowerShell (fe3a2d49-f255-4d10-935c-bda7391108eb) | Sigma-Rules | 1 |