Finding Common Evasion TTPs in PowerShell Logs

TL;DR We tested out the MSBuildShell and PowerLess, two common TTPs to run PowerShell and PS1s without PowerShell.exe and then queried the…