ConvertTo-SecureString Cmdlet Usage Via Command Line
Detects the usage of the "ConvertTo-SecureString" cmdlet via the command line within PowerShell or pwsh.exe processes. This activity is generally uncommon and could indicate suspicious behavior, as it is often used to handle sensitive information like passwords, which attackers might try to extract or manipulate.
YARA-L
