hard20 pts · first answer countssiemalert-triagepowershell
Decoding an -enc command
An alert shows powershell.exe -enc SQBFAFgA... The value is base64 of UTF-16LE text. What do the first characters SQBFAFgA decode to?
Discussion 0
Join free to post in the discussion.
Related questions
- IOC vs IOACybersecurity Analyst
- False positive or false negative?Cybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- What a Tier 1 SOC analyst doesCybersecurity Analyst
- What a benign true positive isCybersecurity Analyst
- What stats count by does in SPLCybersecurity Analyst
- Grouping with summarize in KQLCybersecurity Analyst
- Why logs go to a SIEMCybersecurity Analyst