Gzip Archive Decode Via PowerShell (98767d61-b2e8-4d71-b661-e36783ee24c1)

Detects attempts of decoding encoded Gzip archives via PowerShell.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Standard Encoding - T1132.001 (04fd5427-79c7-44ea-ae13-11b24778ff1c)	Attack Pattern	Gzip Archive Decode Via PowerShell (98767d61-b2e8-4d71-b661-e36783ee24c1)	Sigma-Rules	1
Standard Encoding - T1132.001 (04fd5427-79c7-44ea-ae13-11b24778ff1c)	Attack Pattern	Data Encoding - T1132 (cc7b8c4e-9be0-47ca-b0bb-83915ec3ee2f)	Attack Pattern	2