https://lr2t9iz.github.io/posts/powershell_logg1ng/
Detecting Malicious Script Execution in PowerShell - c-137 Labs