Potential Invoke-Mimikatz PowerShell Script — Detection Rule

Detects Invoke-Mimikatz PowerShell script and alike. Mimikatz is a credential dumper capable of obtaining plaintext Windows account logins and passwords.

Read the full analysis on IntelFusions