Welcome to our

Cyber Security News Aggregator

.

Cyber Tzar

provide a

cyber security risk management

platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.

Obfuscated Deactivation of Script Block Logging, (Fri, Feb 10th)

published on 2023-02-10 10:09:07 UTC by
Content:
PowerShell has a great built-in feature called "Script Block Logging"[1]. It helps to record all activities performed by a script and is a goldmine for incident handlers. That's the reason why attackers tend to try to disable this feature. There are many ways to achieve this, but I found an interesting one.
Article: Obfuscated Deactivation of Script Block Logging, (Fri, Feb 10th) - published almost 2 years ago.

https://isc.sans.edu/diary/rss/29538   
Published: 2023 02 10 10:09:07
Received: 2023 02 10 11:55:05
Feed: SANS Internet Storm Center, InfoCON: green
Source: SANS Internet Storm Center, InfoCON: green
Category: Alerts
Topic: Vulnerabilities
Views: 2

Custom HTML Block

Click to Open Code Editor