List
List
- https://xz.aliyun.com/t/6498
- https://www.malwarearchaeology.com/logging
- https://schneegans.de/windows/process-audit/
- https://pennprovenance.net/index.php?n=Tracker.Config
- https://www.eventsentry.com/blog/2018/01/powershell-p0wrh11-securing-powershell.html
- https://www.eventsentry.com/blog/2018/01/powershell-pw3rh311-detecting-preventing-powershell-attacks.html