Suspicious PowerShell Download and Execute Pattern — Detection Rule

Detects suspicious PowerShell download patterns that are often used in malicious scripts, stagers or downloaders (make sure that your backend applies the strings case-insensitive)

Read the full analysis on IntelFusions