Indirect Command Execution From Script File Via Bash.EXE — Detection Rule
Detects execution of Microsoft bash launcher without any flags to execute the content of a bash script directly. This can be used to potentially bypass defenses and execute Linux or Windows-based binaries directly via bash.