[WINDOWS-POWERSHELL] PowerShell Script to find all Computers with Specific OS

alert any $HOME_NET any -> $HOME_NET any (msg:"[WINDOWS-POWERSHELL] PowerShell Script to find all Computers with Specific OS"; program:*PowerShell*; event_id:4103,4104; content:"Get-ADComputer"; nocase; content:"OperatingSystem -like"; nocase; reference:url,https://blog.netwrix.com/2023/05/25/using-get-adcomputer-cmdlet-in-powershell/; classtype:trojan-activity; sid:5014326; rev:1; metadata:deployment Server,affected_product NONE,affected_version NONE,mitigation NONE,deprecation_reason NONE,tag NONE, created_at 2024_02_28, updated_at 2024_02_28, mitre_tactic_id TA0007, mitre_technique_id T1087;)