SentinelOne Detects and Blocks New Variant of Powershell CryptoWorm
Oct 27, 2022 · This post reviews the capabilities of a new variant of PowerShell CryptoWorm and demonstrates how SentinelOne stops it.
What is Fileless Malware? How to Detect and Prevent Them?
Fileless malware is quickly becoming one of the most popular ways to do so, and to prevent such attacks, it is not enough to block essential operations like PowerShell.
Deconstructing PowerShell Obfuscation in Malspam Campaigns
Jan 18, 2024 · Learn how threat actors seek to evade detection through a variety of PowerShell obfuscation techniques in this guest post by Ankith Bharadwaj.
Threat Actors Actively Exploiting Progress WS_FTP via Multiple …
Jan 18, 2024 · While there is a call to PowerShell, this attack chain does not use any scripts. Instead, each of the commands outlined below are invoked by a series of executables with …
Feature Spotlight | Introducing RemoteOps Custom Script Actions
The RemoteOps Script Library houses an extensive collection of out-of-the-box scripts available for all platforms including PowerShell for Windows and bash scripts for Linux and macOS.
What is Windows PowerShell? - SentinelOne
Hunters use PowerShell to query Windows Event ID 4104 for malicious script blocks, parse output, and feed results into SOAR playbooks. This makes PowerShell a core part of …
What is Mimikatz and How Does it Work? - SentinelOne
Monitor for unusual process access to lsass.exe and check for suspicious PowerShell activity. If you have SentinelOne deployed, it can automatically detect and block Mimikatz processes.
What is CertUtil and How to Prevent Its Abuse? - SentinelOne
Jul 7, 2024 · PowerShell is often the de facto tool of choice for living off the land, but as IT and security teams have become alert to PowerShell’s misuse, attackers have started to turn to …
Qu'est-ce que Windows PowerShell - SentinelOne
Jul 29, 2025 · Découvrez les commandes PowerShell courantes, les meilleures pratiques en matière de script et comment tirer parti de PowerShell à des fins de cybersécurité.
Knight Ransomware: In-Depth Analysis, Detection, and Mitigation
Sep 17, 2025 · They will detect malicious PowerShell scripts and Cobalt Strike artifacts. You can use SentinelOne Singularity XDR Platform to block unsigned binaries from running.