Suspicious PowerShell In Registry Run Keys — Detection Rule

Detects potential PowerShell commands or code within registry run keys

Read the full analysis on IntelFusions