No Admin , no problem — You can still run PowerShell !
Tags
attack-pattern: Data Model Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Powershell - T1059.001 Software - T1592.002 Vulnerabilities - T1588.006 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 195c9b91-1598-4045-88fa-6237c034aee1
Fingerprint 8c52e314c1210582
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 9, 2024, 3:38 a.m.
Added to db Dec. 9, 2024, 5 a.m.
Last updated Dec. 23, 2024, 11:17 a.m.
Headline No Admin , no problem — You can still run PowerShell !
Title No Admin , no problem — You can still run PowerShell !
Detected Hints/Tags/Attributes 33/1/13
Source URLs
Redirection Url
Details Source https://medium.com/@kamranshakil77/no-admin-no-problem-you-can-still-run-powershell-716499b10852?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 761 
google.com
Details Domain 939 
example.com
Details Domain 14 
malicious.com
Details Domain 27 
api.example.com
Details Domain 65 
system.windows
Details File 426 
notepad.exe
Details File 95 
file.txt
Details File 1 
startup.ps1
Details File 6 
payload.ps1
Details File 96 
log.txt
Details Url 2 
https://example.com/file.txt
Details Url 1 
https://malicious.com/payload.ps1
Details Url 3 
https://api.example.com/data