1 comment

[ 3.7 ms ] story [ 15.2 ms ] thread
Given the nature of the news from the FBI today this feels relevant to re-post.

``` Some of the built-in tools this actor uses are: wmic, ntdsutil, netsh, and PowerShell. The advisory provides examples of the actor’s commands along with detection signatures to aid network defenders in hunting for this activity. ```