SOC164 Suspicious Mshta Behavior | LestDefend Cyberexersice

Today we’re going to investigate a lestDefent’s alert, trying to response the correct format. Level: Security Operations Type: LOlbin EventID: 114 Tools: AbuseIP, VirusTotal. What are Living-off-the-l