Computer Discovery And Export Via Get-ADComputer Cmdlet — Detection Rule

Detects usage of the Get-ADComputer cmdlet to collect computer information and output it to a file

Read the full analysis on IntelFusions