Add PowerShell DFIR/CERT detection rules (18 rules)#3782

Open

kurt-r2c wants to merge 7 commits into

feat/powershell-dfir-cert-rules

Commits on Mar 31, 2026

Fix CWE-116 -> CWE-94 on obfuscation detection rules

kurt-r2c
and
claude
committed
refactor: migrate all 18 PowerShell rules to language: powershell AST engine

kurt-r2c
and
claude
committed