安恒信息WAF策略

powershell -executionpolicy bypass -c "$client = new-object System.Net.WebClient; $client.Headers['User-Agent'] = 'edr_agent/2.0(http request using rpc protocol)'; $client.DownloadFile('http://2.3.4.120:10571/download/windows/win_installer.exe', $ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath('.\win_installer.exe'))"; "$proc = Start-Process ./win_installer.exe -ArgumentList @('--uuid 26a598cd-e669-411a-b63c-ad0f43ba80f8 --center 2.3.4.120:10571  --ui 0') -Verb runas -PassThru; $proc.WaitForExit()"