Auto Generated via Readwise

These are my highlights created/synced via Readwise.io - Referral Link

About

Title: Tweets From Nasreddine Bencherchali
Authors: @nas_bench on Twitter
Category:tweets
Number of Highlights: 1
Source URL: https://twitter.com/nas_bench
Date: 2023-04-27
Last Highlighted: **


Highlights

PowerShell has a list of suspicious keywords. If found in a script block an automatic 4104 event will be generated regardless of logging policy :) (True for both PWSH 5/7)

Look for EID 4104 with Level 3 (Warning)

Full List: https://t.co/eWcUwACBtr https://t.co/Rr3HJd0MiS