Remote System Discovery with Adsisearcher

This analytic detects the use of the `[Adsisearcher]` type accelerator in PowerShell scripts to query Active Directory for domain computers. It specifically looks for PowerShell Script Block Logging (EventCode=4104) events containing `adsisearcher`, `objectcategory=computer`, and methods like `findAll()` or `findOne()`. This activity is indicative of Active Directory discovery, which adversaries or Red Teams perform to gain situational awareness and identify potential targets for lateral movement.