Event: “powershell -EncodedCommand “VwByAGkAdABlAC0ATwB1AHQAcAB1AHQAIAAiAFkAbwB1ACAAdwBpAGwAbAAgAG0AYQBrAGUAIABtAGUAIABwAGEAbgBjAGEAawBlAHMAIgA=” Category: “Processes” User/Host: SYSTEM / ASCLTCWKKKN0 Justification: The log shows the execution of a temporary installer file. Score: 100 (Anomaly)
Event: “powershell -EncodedCommand “VwByAGkAdABlAC0ATwB1AHQAcAB1AHQAIAAiAFkAbwB1ACAAdwBpAGwAbAAgAG0AYQBrAGUAIABtAGUAIABwAGEAbgBjAGEAawBlAHMAIgA=” Category: “Processes” User/Host: SYSTEM / ASCLTCWKKKN0 Justification: The log shows the execution of a temporary installer file. Score: 100 (Anomaly)
Event: “powershell -EncodedCommand “VwByAGkAdABlAC0ATwB1AHQAcAB1AHQAIAAiAFkAbwB1ACAAdwBpAGwAbAAgAG0AYQBrAGUAIABtAGUAIABwAGEAbgBjAGEAawBlAHMAIgA=” Category: “Processes” User/Host: SYSTEM / ASCLTCWKKKN0 Justification: The log shows the execution of a temporary installer file. Score: 100 (Anomaly)
Event: “powershell -EncodedCommand “VwByAGkAdABlAC0ATwB1AHQAcAB1AHQAIAAiAFkAbwB1ACAAdwBpAGwAbAAgAG0AYQBrAGUAIABtAGUAIABwAGEAbgBjAGEAawBlAHMAIgA=” Category: “Processes” User/Host: SYSTEM / ASCLTCWKKKN0 Justification: The log shows the execution of a temporary installer file. Score: 100 (Anomaly)
Event: “powershell -EncodedCommand “VwByAGkAdABlAC0ATwB1AHQAcAB1AHQAIAAiAFkAbwB1ACAAdwBpAGwAbAAgAG0AYQBrAGUAIABtAGUAIABwAGEAbgBjAGEAawBlAHMAIgA=” Category: “Processes” User/Host: SYSTEM / ASCLTCWKKKN0 Justification: The log shows the execution of a temporary installer file. Score: 100 (Anomaly)
This site is protected by reCAPTCHA Enterprise and the Google Privacy Policy and Terms of Service apply.