In the Powershell Hunt report, what does the "score" signify?

Question

Options

• ANumber of hosts that ran the PowerShell script
• BHow recently the PowerShell script executed
• CMaliciousness score determined by NGAV
• DA cumulative score of the various potential command line switches

• A
  4% (2)
• C
  2% (1)
• D
  94% (48)

Explanation

In the Powershell Hunt report, the score signifies a cumulative score of the various potential command line switches that were used in the PowerShell script execution. The score is based on a weighted system that assigns different values to different switches based on their potential maliciousness or usefulness for threat hunting. For example, -EncodedCommand has a higher value than -NoProfile. The score does not signify the number of hosts that ran the PowerShell script, how recently the PowerShell script executed, or the maliciousness score determined by

No community discussion yet for this question.