description: The following analytic detects the execution of PowerShell scripts containing Base64 encoded content, specifically identifying the use of `FromBase64String`. It leverages PowerShell ...

description: The following analytic identifies modifications to registry keys commonly used for persistence mechanisms. It leverages data from endpoint detection sources like Sysmon or Carbon Black, ...

Note: This is the English adaptation of my original technical post. For my French-speaking network, you can read the original french version here: Studio Tweaks : L’add-on / script qui va changer ...

I am a salaryman whose main job is business process improvement. On note, under the theme of "Enjoying contemplation and organizing thoughts," I will share information in a relaxed way, while digging ...