ConvertTo-SecureString Cmdlet Usage Via CommandLine

SigmaHQ Detections@sigmaHQ

•updated Feb 1, 2023•0•0•2

Detects usage of the "ConvertTo-SecureString" cmdlet via the commandline. Which is fairly uncommon and could indicate potential suspicious activity