DFSP # 435 - Good Ol’ Powershell

Threat actors often exploit PowerShell in cyber attacks due to its capabilities and integration with Windows operating systems. Microsoft has cited powershell as one of the most commonly used tools in the attack chain. It also comes up in phishing campaigns and other attacks that include infecting URL links. The challenge lies in the fact that it is a commonly used administration tool. As an analyst, you can expect to have lots of powershell scripts and commands come up during …

attack attack chain attacks campaigns capabilities challenge cyber cyber attacks exploit good integration lies links microsoft operating systems phishing phishing campaigns powershell systems threat threat actors tools url windows