Powershell Command Line Detection

Ravi Asakapalli@Ravishankaraskp

•updated Apr 9, 2026•14•2•344

Detects PowerShell execution with suspicious Base64 decoding, commonly linked to malware installation