[WINDOWS-POWERSHELL] Powershell DisableScriptScanning detected

alert any $HOME_NET any -> $EXTERNAL_NET any (msg:"[WINDOWS-POWERSHELL] Powershell DisableScriptScanning detected"; program: *PowerShell*; content: "DisableScriptScanning"; content: !"this.AntiVirusSignatureVersion
| 20 3d 20
| antiVirusSignatureVersion"; content: !"
| 5B
| System
| 2E
| IO
| 2E
| File
| 5D 3A 3A
| Open
| 28 27
| C
| 3A 5C
| ProgramData
| 5C
| Microsoft
| 5C
| Windows Defender Advanced Threat Protection
| 5C
| DataCollection
| 0A
| "; content: !"
| 5f
| cmdletization
| 5f
| defaultValueIsPresent";nocase; content:!"ValidateNotNullOrEmpty";nocase; content:!"Path: C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\"; classtype: suspicious-command; sid:5009325; metadata: created_on 2022_11_22, old_sid 5005915; rev:3;)