PowerShell Base64 Encoded FromBase64String Cmdlet — Detection Rule

Detects usage of a base64 encoded "FromBase64String" cmdlet in a process command line

Read the full analysis on IntelFusions