Decoding a PowerShell -EncodedCommand During Incident Response (the UTF-16 gotcha)
DEV Community
Decoding a PowerShell -EncodedCommand During Incident Response (the UTF-16 gotcha)
You're triaging an alert. Scheduled task, weird parent process, and a command line that looks like...
0 comments
No comments yet.