Comment on Microsoft Teams status

• dingleberrylover@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

  I have a similar one. Much simpler. Here it is:

  $wsh = New-Object -ComObject WScript.Shell
  while(1) {
  $wsh.SendKeys(‘+F{15}‘)
  Start-Sleep -seconds 59
  }
  

  source
• Magnum@infosec.pub ⁨3⁩ ⁨weeks⁩ ago

  This will show up in process monitoring.

  source

  • JcbAzPx@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

    And sit in a log that no one is paid enough to continuously check.

    source

    • Magnum@infosec.pub ⁨3⁩ ⁨weeks⁩ ago

      Should be picked up as suspicious behavior and highlighted, your company just isn’t big enough.

      source

      • KyuubiNoKitsune@lemmy.blahaj.zone ⁨2⁩ ⁨weeks⁩ ago

        Yup, mine is similar.

        Highlight doubt it. Anyway I run powershell scripts all the time when forced onto Windows, so 🤷‍♀️

        source