PowerShell Web Access Feature Enabled Via DISM — Detection Rule
Detects the use of DISM to enable the PowerShell Web Access feature, which could be used for remote access and potential abuse
Detects the use of DISM to enable the PowerShell Web Access feature, which could be used for remote access and potential abuse