Introducing > PowerShell.Exposed
ID: ff773329-df57-5707-94de-10bac6046030
STIX ID: report--ff773329-df57-5707-94de-10bac6046030
Feed Name: Detect FYI
This post announces ps.exposed, a community project curating regex-based detection indicators for PowerShell with MITRE ATT&CK coverage, explaining how regex improves resilience against obfuscation and aliases and detailing the YAML-based indicator format. It also introduces Avasero’s free detection engine and modeling approach that aggregates indicators, sanitizes payloads, and dynamically scores them, inviting community contributions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
