Alerts / Persistent Creation of a Windows Scripting Host Automation Object
Persistent Creation of a Windows Scripting Host Automation Object
1
2
3
5
6
17
18
69
70
100
101
127
128
130
131
132
133
134
135
138
139
141
142
147
148
165
166
269
270
271
290
291
292
{
"id": "alert://priv:ipc:96072:1707837400404:f44e4d8d-5e50-5535-b05c-79872a60b1f5",
"group_key": [
],
"severity_history": [
],
"metadata": {
},
"entities": {
},
"enrichment_details": [
],
"attack_technique_ids": [
],
"tenant_id": "96072",
"status": "OPEN",
"suppressed": false,
"resolution_reason": "",
"tags": [
],
"sensor_types": [
],
"event_ids": [
],
"reference_details": [
],
"third_party_details": [
],
"threat_score": 7,
"events_metadata": {
},
"__typename": "Alert2"
}
Enter to Rename, Shift+Enter to Preview