Skip to content
Threat Feed
Subscribe

Tag

Base64

2 briefs RSS
high advisory

Long Base64 Encoded Command via Scripting Interpreter

Detection of oversized command lines used by Python, PowerShell, Node.js, or Deno interpreters containing base64 decoding or encoded-command patterns, indicating potential evasion and malicious execution.

Elastic Endpoint defense-evasion execution scripting-interpreter base64 command-line
2r 5t
high advisory

PowerShell Manual Base64 Decoding Implementation

This detection identifies Windows PowerShell processes implementing manual Base64 decoding, a technique used by threat actors to obfuscate malicious payloads and evade standard detection mechanisms.

PowerShell base64 obfuscation defense-evasion
2r 2t 1i