Remote Thread Creation Via PowerShell — Detection Rule

Detects the creation of a remote thread from a Powershell process to another process

Read the full analysis on IntelFusions