Reply to thread

Message: <blockquote data-quote="blackice" data-source="post: 811524" data-attributes="member: 79035"><p>I finally got around to adding the Powershell rules on top of ESET's recommended ransomware rules. I had something I was working on that needed a powershell line run, but I finished. I tested it out and it seemed to be working. Then this morning randomly svchost.exe tried to open powershell in the background. Are there any legitimate processes that need that to happen?</p></blockquote><p></p>

Top