Simulated scenario where a PowerShell script is used to silently bypass a CrowdStrike Falcon endpoint and establish a reverse shell all while the sensor is running
Objective: Demonstrate how threat actors may abuse trusted scripting environments and highlight the importance of layered defence and behavioural detection.
Source: Linkedin Bibek Sapkota