PowerShell Web Access Installation - PsScript (5f9c7f1a-7c21-4c39-b2f3-8d8006e0e51f)

Detects the installation and configuration of PowerShell Web Access, which could be used for remote access and potential abuse

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736)	Attack Pattern	PowerShell Web Access Installation - PsScript (5f9c7f1a-7c21-4c39-b2f3-8d8006e0e51f)	Sigma-Rules	1
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736)	Attack Pattern	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	2