Tag
Event ID 4688
3 public portfolio entries.
- SOC Playbook: Suspicious PowerShell TriageSecurity Operations
- SOC Reference: Windows Log Quick ReferenceSecurity Operations
- SOC Investigation: Suspicious PowerShell ExecutionSecurity Operations
3 public portfolio entries.