PowerShell Decompress Commands — Detection Rule
A General detection for specific decompress commands in PowerShell logs. This could be an adversary decompressing files.
A General detection for specific decompress commands in PowerShell logs. This could be an adversary decompressing files.