LNK File with Hidden PowerShell Command

This rule detects LNK (shortcut) files that contain embedded PowerShell commands, specifically looking for the string "powershell" and the argument "-windowstyle hidden". This combination is often used by adversaries to execute malicious PowerShell scripts discreetly, making them less visible to the user.