LoFP
/
t1070.003
t1070.003
Title
Tags
legitimate administrators may run these commands
t1053
t1070
t1070.003
t1490
t1505
t1565
t1565.002
cisco
sigma
legitimate powershell scripts
t1003
t1003.003
t1003.006
t1033
t1036
t1036.003
t1057
t1070
t1070.003
t1083
t1201
t1546
t1546.015
t1553
t1553.005
t1562
t1562.001
t1564
t1564.006
t1615
windows
sigma
legitimate script that disables the command history
t1070
t1070.003
windows
sigma