MITRE Tekniği: T1059 - Command and Scripting Interpreter

Suspicious PowerShell Detection

Encoded command, unusual parent, network activity veya suspicious script-block paterni.