Obfuscated PowerShell with EncodedCommand and Download Cradle Indicators
Detects common suspicious PowerShell command-line patterns often used for malicious purposes, including base64-encoded command execution, hidden-window execution with common evasion flags, and the use of download/execution cmdlets for in-memory payload delivery.
CQL
