Detects usage of a PowerShell command to dump the live memory of a Windows machine
Read the full analysis on IntelFusions