Internal DOS commands in Advanced Hunting

Copper Contributor

Hello,

 

Is there a way to detect internal DOS commands in Advanced Hunting? For example, commands (in cmd.exe or PowerShell) like "cd" or "type" are internal and don't have any executable (unlike ping.exe). is there a way to track those commands?

 

Best regards

0 Replies