Netskope Threat Labs

ComPowerShell

ATP Sandbox Adv. Heuristics

ComPowerShell is a detection name for COM-based PowerShell execution.

First seen
May 2022
Last seen
October 2026
Alert Name
Document-Word.Backdoor.ComPowerShell