XWorm malware resurfaces with ransomware module, over 35 plugins

New versions of the XWorm backdoor are being distributed in phishing campaigns after the original developer, XCoder, ...
GitHub

EntraAuthPolicyHound: BloodHound OpenGraph Entra ID Authentication Policy Data Collector

This PoC community project provides a sample PowerShell script that collects Microsoft Entra ID permissions related to Temporary Access Passes (TAPs) and Passkeys (FIDO2 security keys or mobile ...
GitHub

A simple set of configuration files and scripts that greatly enhances the default MPV experience. Installation is dead simple with a PowerShell installer script that sets ...

To install for Windows, it's as simple as the steps below. For Linux, you would first need to install PowerShell to run the installer. Afterwards you will have to modify the paths in the config to ...
IEEE

Exploring the Use of Machine Learning to Identify Threats in Powershell Scripts

Abstract: PowerShell is a widely utilized tool by both system administrators and attackers for performing complex management tasks and launching attacks. The detection of malicious scripts poses a ...