5 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Potential Remote PowerShell Session Initiated | High |
| Remote PowerShell Session Host Process (WinRM) | Medium |
| Remote PowerShell Session (PS Module) | High |
| Remote PowerShell Session (PS Classic) | Low |
| Remote PowerShell Sessions Network Connections (WinRM) | High |
Showing 5 of 5