hightestEmerging Threat
FakeUpdates/SocGholish Activity
Detects initial execution of FakeUpdates/SocGholish malware via wscript that later executes commands via cmd or powershell.
windowsprocess_creation
2024-08-23
SocGholish is tracked here as a malware family or toolset with 1 Sigma detection spanning 2022. Coverage centers on windows / process_creation.
Detects initial execution of FakeUpdates/SocGholish malware via wscript that later executes commands via cmd or powershell.