Netskope Threat Labs

INDICATOR-COMPROMISE Metasploit run hidden powershell attempt

IPS-SWG

1 SID: 45137

First seen
May 2022
Last seen
October 2026

Detects Metasploit framework payload activity, indicating use of offensive tooling during an intrusion. Spotting these indicators early helps contain an intrusion before cyberattackers expand access.