On Detection, Information Security, Research, Detection Engineering.
and love. These features made PowerShell an exciting modality for user hunting and attacker tradecraft in general. get-netsession [netapi32!NetSessionEnum] (BOF) TrustedSec provides a Beacon Object File (BOF) called get-netsession as part of their CS-Situational-Awareness-BOF project. I imagine