Feed
Discussion
SOC164 – Suspicious Mshta Behavior Walkthrough (EventID:114)
Today we’re investigating another LetsDefend alert: SOC164 – Suspicious Mshta Behavior This alert focuses on detecting suspicious usage of a legitimate Windows binary often abused by attackers. 🔎 Al
rideshcyber.hashnode.dev4 min read
#security#cybersecurity#cybersecurity-1#infosec-cjbi6apo9015yaywu2micx2eo#blueteam#alert-triage#soc-analyst#soc#blue-team#incident-response#alertmanager
Responses
No responses yet.