PowershellCommand - uncommon commands on machine
Find which uncommon Powershell Cmdlets were executed on that machine in a certain time period. This covers all Powershell commands executed in the Powershell engine by any process.
Microsoft Sentinel (KQL)
