NetSupport Manager (client32.exe) spawned via PowerShell loader chain
Detects the launch of client32.exe (a core component of NetSupport Manager) as a child process of PowerShell, indicating potential malicious deployment of the software as a RAT rather than legitimate administrative activity.
Microsoft Sentinel (KQL)
