Hunting for Suspicious PowerShell Commands Hidden Inside PowerShell Scripts

Bi Yue Xu@biyuexu

•updated Sep 14, 2026•4•0•6

This KQL query hunts for PowerShell commands hidden within PowerShell scripts, flagging keywords seen in there that are commonly associated with malicious activity.