Malicious PowerShell Commandlets - PoshModule — Detection Rule

Detects Commandlet names from well-known PowerShell exploitation frameworks

Read the full analysis on IntelFusions