Netskope Threat Labs

MALWARE-CNC PowerShell Empire variant outbound connection

IPS-SWG

1 SID: 44564

First seen
October 2023
Last seen
October 2026

Detects malicious activity tied to the PowerShell Empire post-exploitation framework.