https://www.cybereason.com/blog/powershell-attacks-stopped-when-automated-detection-meets-security-services?lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_recent_activity_details_all%3Bu8aPDYV%2BRK6AzOENoM3h5Q%3D%3D&licu=urn%3Ali%3Acontrol%3Ad_flagship3_profile_view_base_recent_activity_details_all-object