Alternate PowerShell Hosts - PowerShell Module
Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe
Sigma

Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe

Already have an account?