Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Moriarty Meng"

3,707Total
3,116Detection
451Emerging
137Hunting
Detectionhightest

Run PowerShell Script from Redirected Input Stream

Detects PowerShell script execution via input stream redirect

WindowsProcess Creation
TA0005 · Defense EvasionTA0002 · ExecutionT1059 · Command and Scripting Interpreter
Moriarty Meng+2Sat Oct 17windows