soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze Investigation LetsDefend Case Study This repository contains a documented SOC investigation based on a LetsDefend scenario involving suspicious PowerShell activity, a GitHub-hosted payload, and execution of the EDRFreeze tool. What this repository includes Full report:...