Detects the use of Jlaive to execute assemblies in a copied PowerShell
Read the full analysis on IntelFusions