Defender Onboarding command

Irin Sultana 372 Reputation points
2024-07-10T16:58:32.1366667+00:00

Hi,

I have question about defender onboarding command.

powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden $ErrorActionPreference= 'silentlycontinue';(New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\test-WDATP-test\invoice.exe');Start-Process 'C:\test-WDATP-test\invoice.exe'

What's the invoice.exe?

Thank You!

Irin

Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
181 questions
{count} votes