Suspicious PowerShell Get Current User — Detection Rule

Detects the use of PowerShell to identify the current logged user.

Read the full analysis on IntelFusions