On: Windows PowerShell Phish Has Scary Potential

[nullindividual]

What would you define as 'suspicious'? How would you distinguish suspicious from not suspicious?

[eviks → nullindividual]

Frequency, network use, running unknown executables