WLDR Agent PowerShell RunspacePool Execution Engine

Duo Tech@duotech

•updated Jul 16, 2026•1•0•1

Detects the execution of PowerShell scripts associated with the WLDR Agent, specifically looking for indicators of RunspacePool initialization, module runspace starts, and message queue communication patterns.