ECO RI Rich Finding Common Evasion TTPs in PowerShell Logs TL;DR We tested out the MSBuildShell and PowerLess, two common TTPs to run PowerShell and PS1s without PowerShell.exe and then queried the…
