Alternate PowerShell Hosts Pipe
Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe
Sigma

Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe

Already have an account?