Powershell Suspicious Win32_PnPEntity — Detection Rule

Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.

Read the full analysis on IntelFusions