Potential PowerShell Obfuscation Using Alias Cmdlets

SigmaHQ Detections@sigmaHQ

•updated Sep 17, 2026•5•0•6

Detects Set-Alias or New-Alias cmdlet usage. Which can be use as a mean to obfuscate PowerShell scripts