Adversaries may abuse PowerShell commands and scripts for execution.

Tactics
TA0002

Sub-technique of
T1059


See: MITRE ATT&CK