…

..

powershell_classic_alternate_powershell_hosts.yml

…

powershell_classic_powercat.yml

…

powershell_classic_remote_powershell_session.yml

…

powershell_classic_susp_athremotefxvgpudisablementcommand.yml

…

powershell_classic_susp_zip_compress.yml

…

powershell_classic_suspicious_download.yml

…

powershell_delete_volume_shadow_copies.yml

…

powershell_downgrade_attack.yml

…

powershell_exe_calling_ps.yml

…

powershell_renamed_powershell.yml

…

powershell_tamper_with_windows_defender.yml

…

powershell_wsman_com_provider_no_powershell.yml

…

powershell_xor_commandline.yml

…