Threat Hunt: Suspicious PowerShell Email Enumeration and Export Activity

Awais Munir@iawais

•updated Jul 29, 2025•7•2•59

Detects potential email harvesting using PowerShell cmdlets with export parameters, stealth flags, and uncommon parent processes.