1 rule found for "Sergey Soldatov"
Detects PowerShell script execution from Alternate Data Stream (ADS)