Get-NetTcpConnection with PowerShell

The analytic identifies the execution of `powershell.exe` with the `Get-NetTcpConnection` command, which lists current TCP connections on a system. This activity may indicate an adversary or Red Team performing network reconnaissance or situational awareness, potentially aiding in lateral movement or further exploitation within the network.