PSAP
TCM Security Practical SOC Analyst Professional (PSAP)
Advanced Siem AnalysisEnglish
Exam overviewPractice session
Which PowerShell command-line artifact in Windows Event ID 4104 (Script Block Logging) most strongly indicates an attacker is attempting to bypass the Execution Policy?
Loading your practice session…