INDICATOR-COMPROMISE Win.Tool.WinPWN toolkit Get-DotNetServices download attempt

Description

Detects the WinPWN Windows attack toolkit, which bundles credential dumping and privilege escalation modules. Spotting these indicators early helps contain an intrusion before cyberattackers expand access.

References

• github.com →