Skip to content
Threat Feed
Subscribe

Product

Elastic Agent System Windows Integration

1 brief RSS
low advisory

Detection of Rare PowerShell Scripts on Windows Systems

Elastic's machine learning job detects rare PowerShell script executions on Windows hosts, identified by their script block hash, indicating potential malware activity or persistence mechanisms that deviate from an established baseline.

Kibana 9.4.0+ +1 windows machine-learning powershell execution threat-detection
1t