Detects the execution of PowerShell via the creation of a named pipe starting with PSHost
Already have an account? Log in