PowerShell Get-DomainGroup Execution

The analytic detects the execution of `powershell.exe` with command-line arguments that query for domain groups using `Get-DomainGroup`. This activity is often associated with PowerView, a tool used by adversaries for domain enumeration and situational awareness. Detecting this can help identify attackers gaining insights into domain group structures, which could aid in further exploitation and privilege escalation.