this post was submitted on 24 Oct 2023
1719 points (96.9% liked)
Memes
45665 readers
1055 users here now
Rules:
- Be civil and nice.
- Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Enterprise security software tends to err much more on the side of caution.
There are plenty of Windows features who's usage will flag because they are also favourite tactics by actual threats, such as Powershell one liners. Bonus if it's in Base64.
Powershell one liners are uglier than the worst winner of Obfuscated Perl Contest. Super cringe....
That I would agree... But they're excellent for getting fileless reverse shell on a victim's machine