https://mustafanafizdurukan.github.io/posts/unmasking-powershell-malware/
Unmasking Malware: From PowerShell Tactics to Sysmon Detection - Mustafa Durukan