Suspicious Encoded Powershell. https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules/blob/main/Threat%20Hunting%20Cases/Suspicious%20Encoded%20Powershell.md @Expire_Team 1.7K viewsedited 07:11