Event Details Medium

Event Summary
Event ID

3

Risk Score
65.75
Status
Active
Timestamp

Security Source

CrowdStrike Falcon (EDR)

Risk Category

Suspicious Process

User Information
N
narmstrong

[email protected]

Department

Engineering

Job Title

QA Analyst

View User Risk Profile
Mitigations
No mitigations have been applied to this event.
Event Details
Tactic execution
Device Id DESKTOP-MRW456
Technique T1059.001
Command Line powershell.exe -encodedcommand JABjAGwAaQBlAG...
Detection Id CS23456789
Process Name powershell.exe
Parent Process explorer.exe
Raw JSON Data
{
  "command_line": "powershell.exe -encodedcommand JABjAGwAaQBlAG...",
  "detection_id": "CS23456789",
  "device_id": "DESKTOP-MRW456",
  "parent_process": "explorer.exe",
  "process_name": "powershell.exe",
  "tactic": "execution",
  "technique": "T1059.001"
}