你即將離開本站

並前往https://attackevals.mitre-engenuity.org/enterprise/participants/trendmicro/queryregistry?adversaries=carbanak_fin7

Query Registry (T1012) - ATT&CK® EVALUATIONS

... named "Registry Query of an Unusual File via PowerShell" (Low) was generated when a PowerShell script was detected containing Get-ItemProperty.

確定！ 回上一頁

查詢 「get-itemproperty」的人也找了：

  1. Set-ItemProperty
    2.
  2. Get-Content
    3.
  3. get-itempropertyvalue
    4.
  4. PowerShell Get registry value
    5.
  5. Get itemproperty registry value only
    6.
  6. Get-PSDrive
    7.
  7. PowerShell edit registry
    8.
  8. PowerShell Get-Item
    9.