Introduction to Microsoft PowerShell – Variables
Tags
attack-pattern: | Data Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Powershell - T1086 Scripting - T1064 Scripting |
Common Information
Type | Value |
---|---|
UUID | c642ef95-ab67-4998-8158-b48cce379c2e |
Fingerprint | 2ed1eb502eb01d1c |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | April 18, 2012, midnight |
Added to db | Jan. 18, 2023, 11:07 p.m. |
Last updated | Oct. 31, 2024, 11:36 p.m. |
Headline | Shell is Only the Beginning |
Title | Introduction to Microsoft PowerShell – Variables |
Detected Hints/Tags/Attributes | 34/1/14 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 64 | go.microsoft.com |
|
Details | Domain | 107 | system.management |
|
Details | Domain | 1 | system.management.automation.internal.host |
|
Details | Domain | 73 | schemas.microsoft.com |
|
Details | Domain | 1 | found.ps |
|
Details | File | 7 | powershell_profile.ps1 |
|
Details | File | 1 | remoting.ps |
|
Details | File | 46 | automation.ps |
|
Details | File | 41 | system.obj |
|
Details | File | 6 | collections.obj |
|
Details | File | 1 | found.ps |
|
Details | IPv4 | 28 | 4.0.0.0 |
|
Details | Url | 1 | http://go.microsoft.com/fwlink/?linkid=113361 |
|
Details | Url | 2 | http://schemas.microsoft.com/powershell/microsoft.powershell |