Home / Blog

The blog

Search results for event 4104

1 post found

BeginnerAlert Triage

How to Triage an Encoded PowerShell Alert

A step by step way to decode an encoded PowerShell command, check its parent process and related activity, and decide whether to close or escalate.

1 Nov 20268 min read