DS0012

DS0012Script

ATT&CK
14.1
References
4

Description

A file or stream containing a list of commands, allowing them to be launched in sequence(Citation: Microsoft PowerShell Logging)(Citation: FireEye PowerShell Logging)(Citation: Microsoft AMSI)

References

  1. https://attack.mitre.org/datasources/DS0012
  2. https://www.fireeye.com/blog/threat-research/2016/02/greater_visibilityt.html
  3. https://docs.microsoft.com/en-us/windows/win32/amsi/antimalware-scan-interface-portal
  4. https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging_windows?view=powershell-7

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Data component
Script Execution
Data source
Command
Data source
Module
Data component
Command Execution
Data source
Scheduled Job
Data source
File
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.