Powershell Script Created by Remote Management Service
Last updated on:
In this page
About the rule
Rule Type
Standard
Rule Description
Detects the creation of a PowerShell script file (.ps1) by a remote management or remote access service process.
Severity
Trouble
Detection
Execution Mode
realtime
Log Sources
Windows
