@inproceedings{han:hal-03440834, TITLE = {{IMShell-Dec: Pay More Attention to External Links in PowerShell}}, AUTHOR = {Han, Ruidong and Yang, Chao and Ma, Jianfeng and Ma, Siqi and Wang, Yunbo and Li, Feng}, URL = {https://inria.hal.science/hal-03440834}, NOTE = {Part 5: System Security}, BOOKTITLE = {{35th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC)}}, ADDRESS = {Maribor, Slovenia}, EDITOR = {Marko H{\"o}lbl and Kai Rannenberg and Tatjana Welzer}, PUBLISHER = {{Springer International Publishing}}, SERIES = {ICT Systems Security and Privacy Protection}, VOLUME = {AICT-580}, PAGES = {189-202}, YEAR = {2020}, MONTH = Sep, DOI = {10.1007/978-3-030-58201-2\_13}, KEYWORDS = {Intrusion detection ; Powershell attack ; Steganography detection}, PDF = {https://inria.hal.science/hal-03440834/file/497034_1_En_13_Chapter.pdf}, HAL_ID = {hal-03440834}, HAL_VERSION = {v1}, }