SOC164 – Suspicious Mshta Behavior Walkthrough (EventID:114)
Today we’re investigating another LetsDefend alert: SOC164 – Suspicious Mshta Behavior This alert focuses on detecting suspicious usage of a legitimate Windows binary often abused by attackers. 🔎 Al
#security#cybersecurity#cybersecurity-1#infosec-cjbi6apo9015yaywu2micx2eo#blueteam#alert-triage#soc-analyst#soc#blue-team#incident-response#alertmanager
Responses
Markdown supported · ⌘↵ to post
No responses yet.