Suspicious PowerShell Parent Process — Detection Rule

Detects a suspicious or uncommon parent processes of PowerShell

Read the full analysis on IntelFusions