707564fc98c58247d088183731c2e5a0f51923c6d9a94646b0f2158eb5704df4SHA-256 hash

Reported by 1 independent source · first reported 15 May 2025 by Elastic Security Labs · last reported 15 May 2025

Last reported 17 months ago

What the reports say

1 report, newest first · the exact sentence from each

“"sha256": "707564fc98c58247d088183731c2e5a0f51923c6d9a94646b0f2158eb5704df4"”

Elastic Security LabsVendor15 May 2025
Misbehaving Modalities: Detecting Tools, Not Techniques

Indicators reported together

named in the same reports

process.ext.api.parameters[.]protectionin 1 report
hxxps://raw.githubusercontent[.]com/S3cur3Th1sSh1t/Get-System-Techniques/master/TokenManipulation/Get-WinlogonTokenSystem.ps1in 1 report

Copy these 2 indicators · defanged

2 indicators, defanged, one per line

process.ext.api.parameters[.]protection
hxxps://raw.githubusercontent[.]com/S3cur3Th1sSh1t/Get-System-Techniques/master/TokenManipulation/Get-WinlogonTokenSystem.ps1

Thanks — we review every report.

Report a wrong value