About
Title: Tweets From Nasreddine Bencherchali Authors: @nas_bench on Twitter Category:tweets Number of Highlights: 1 Source URL: https://twitter.com/nas_bench Date: 2023-04-27 Last Highlighted: **
Highlights
PowerShell has a list of suspicious keywords. If found in a script block an automatic 4104 event will be generated regardless of logging policy :) (True for both PWSH 5/7)
Look for EID 4104 with Level 3 (Warning)
Full List: https://t.co/eWcUwACBtr https://t.co/Rr3HJd0MiS
