Detects execution of the POWERHOLD script seen used by FIN7 as reported by WithSecureLabs
Already have an account? Log in
