Netskope Threat Labs

DirSrch

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies PowerShell-based tools that search directories on infected systems for sensitive files and data.

First seen
September 2025
Last seen
October 2026
Alert Name
Dump:Generic.PWSH.DirSrch.A.FFFFFFFE
Generic.PWSH.DirSrch.A.01500BE7
Generic.PWSH.DirSrch.A.0724C1A6
Generic.PWSH.DirSrch.A.19290432
Generic.PWSH.DirSrch.A.1C58B3E8
Generic.PWSH.DirSrch.A.2AADF7CD
Generic.PWSH.DirSrch.A.43A85831
Generic.PWSH.DirSrch.A.4BE38AD4
Generic.PWSH.DirSrch.A.5F45E9B9
Generic.PWSH.DirSrch.A.6B0144C3