description: The following analytic identifies potential DNS exfiltration using the nslookup application. It detects specific command-line parameters such as query type (TXT, A, AAAA) and retry ...
description: The following analytic detects the enabling of the SMB1 protocol via `powershell.exe`. It leverages PowerShell script block logging (EventCode 4104) to identify the execution of the ...
Explore 280+ CMD commands with detailed descriptions across Windows versions, from Windows XP to 11 The Command Prompt in ...
一些您可能无法访问的结果已被隐去。
显示无法访问的结果