September 9, 2022 at 01:33AM

■■□□□ Suspicious Encoded Powershell.

https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules/blob/main/Threat%20Hunting%20Cases/Suspicious%20Encoded%20Powershell.md

https://t.me/cKure/11777