Whitelist/Exclude Powershell script

Thank you for reaching out to the community forum. 

Try performing a path exclusion for this one and let us know. You may refer to this Documentation for more information. 

There is a risk excluding the C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, this may allow even the positive exploit/attack, which why I'm inclined to exclude it.

I'm looking to exclusion that include the whole command to make it more specific. 

C:\Windows\system32\cmd.exe /C PowerShell -NoProfile -NonInteractive -ExecutionPolicy Unrestricted -EncodedCommand  -Some Script Here- 

There is a risk excluding the C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, this may allow even the positive exploit/attack, which why I'm inclined to exclude it.

I'm looking to exclusion that include the whole command to make it more specific. 

C:\Windows\system32\cmd.exe /C PowerShell -NoProfile -NonInteractive -ExecutionPolicy Unrestricted -EncodedCommand  -Some Script Here-