((Image:\\powershell.exe OR Image:\\powershell_ise.exe OR Image:\\pwsh.exe) OR (OriginalFileName:PowerShell.Exe OR OriginalFileName:pwsh.dll)) (CommandLine:Add\-AADInt* OR CommandLine:ConvertTo\-AADInt* OR CommandLine:Disable\-AADInt* OR CommandLine:Enable\-AADInt* OR CommandLine:Export\-AADInt* OR CommandLine:Find\-AADInt* OR CommandLine:Get\-AADInt* OR CommandLine:Grant\-AADInt* OR CommandLine:Initialize\-AADInt* OR CommandLine:Install\-AADInt* OR CommandLine:Invoke\-AADInt* OR CommandLine:Join\-AADInt* OR CommandLine:New\-AADInt* OR CommandLine:Open\-AADInt* OR CommandLine:Read\-AADInt* OR CommandLine:Register\-AADInt* OR CommandLine:Remove\-AADInt* OR CommandLine:Reset\-AADInt* OR CommandLine:Resolve\-AADInt* OR CommandLine:Restore\-AADInt* OR CommandLine:Save\-AADInt* OR CommandLine:Search\-AADInt* OR CommandLine:Send\-AADInt* OR CommandLine:Set\-AADInt* OR CommandLine:Start\-AADInt* OR CommandLine:Unprotect\-AADInt* OR CommandLine:Update\-AADInt*)