Skip to content

Instantly share code, notes, and snippets.

@GossiTheDog
GossiTheDog / Native-Windows-Useragents-malicious.txt
Last active November 18, 2022 01:30 — forked from trietptm/Native-Windows-Useragentss.txt
Native Windows UserAgents for Threat Hunting
//Invoke-WebRequest in Powershell - manually whitelist legit content first:
Mozilla/*WindowsPowerShell/*
System.Net.WebClient.DownloadFile():
None
//Start-BitsTransfer - manually whitelist legit content first:
Microsoft BITS/*
//certutil.exe - manually whitelist legit content first: