PowerShell Base64 Encoded Reflective Assembly Load — Detection Rule

Detects base64 encoded .NET reflective loading of Assembly

Read the full analysis on IntelFusions