Change PowerShell Policies to an Insecure Level — Detection Rule

Detects changing the PowerShell script execution policy to a potentially insecure level using the "-ExecutionPolicy" flag.

Read the full analysis on IntelFusions