Suspicious Unrestricted Powershell Execution

nomit vyas@xoxo

•updated Feb 23, 2026•1•0•37

Detects PowerShell execution with Unrestricted execution policy combined with suspicious flags or uncommon script extensions.