Netskope Threat Labs

MALWARE-CNC PowerShell Empire HTTP listener response

IPS-SWG

1 SID: 45352

First seen
January 2022
Last seen
July 2026

Detects malicious activity tied to the PowerShell Empire HTTP listener post-exploitation framework.