Potential Manage-bde.wsf Abuse To Proxy Execution
Detects potential abuse of the "manage-bde.wsf" script as a LOLBIN to proxy execution. This technique involves using wscript.exe or cscript.exe to execute manage-bde.wsf, which in turn can be used to execute other commands or scripts, bypassing certain security controls.
Sigma
