Skip to content

Commit b9bcd6f

Browse files
authored
Update Powershell.yml
1 parent 32316b0 commit b9bcd6f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

yml/OSBinaries/Powershell.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,5 @@ Commands:
1515
Full_Path:
1616
- Path: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
1717
Detection:
18-
- IOA: Multiple TCP SYN packets to sequential ports from a single source IP.
19-
- IOA: High rate of connection attempts to closed ports.
18+
- IOC: Multiple TCP SYN packets to sequential ports from a single source IP.
19+
- IOC: High rate of connection attempts to closed ports.

0 commit comments

Comments
 (0)