SEC-0227

Splunk Suspicious PowerShell Execution Detection Generator

Generate a tuned Splunk detection for suspicious powershell execution with field mapping and false-positive guidance

Updated 25 October 2026