Suspicious PowerShell Base64 Decoding

Kaung Khant Ko@kaungkhantko

•updated Apr 1, 2026•16•1•168

Detects PowerShell execution with suspicious Base64 decoding, commonly linked to malware installation