Potential Obfuscated Web Request via PowerShell

Tim P@bobbyTablez

•updated Jul 28, 2025•3•0•65

This rule detects the presence of a plain text artifact in a common download scenario in PowerShell where the second required portion of the command is not present. This could be an attempt to obfuscate the script in order to evade detections.