Recon Information for Export with PowerShell — Detection Rule

Once established within a system or network, an adversary may use automated techniques for collecting internal data

Read the full analysis on IntelFusions