Argamal PowerShell Downloader Execution

Detects PowerShell download activity associated with Argamal's second-stage payload retrieval.

Microsoft Sentinel (KQL)