description: Detects non-interactive PowerShell activity by looking at the "powershell" process with a non-user GUI process such as "explorer.exe" as a parent ...
Security researchers at Sysdig recorded the first exploitation attempt against CVE-2026-44338 — a missing-authentication flaw ...
The source code of the current release is available on GitHub tag v0.12.0-7.1 tree.