PSScriptPolicyTest Creation By Uncommon Process

SigmaHQ Detections@sigmaHQ

•updated 13 days ago•2•0•3

Detects the creation of the "PSScriptPolicyTest" PowerShell script by an uncommon process. This file is usually generated by Microsoft Powershell to test against Applocker.