LogScale Queries

Query

Rare and Common Encrypted Command Lines

LogScale · Detection & Monitoring · v1 · @sebastian · 25.7.2026

All Queries

Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Queries/Rare and Common Encrypted Command Lines.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Helpful-CQL-Queries/Rare%20and%20Common%20Encrypted%20Command%20Lines.md

DetectionEndpointLinuxWindows

Query contentv1

Download v1
Loading editor…

Version history

By default each save creates a new version. Overwrites update the current version in place. Open any version to view or download it.

  1. v1current

    24.7.2026, 18:56:41