RecipeCONSTRUCTED
PowerShell -EncodedCommand to readable script
The two operations that turn the base64 after -e, -enc or -EncodedCommand into the script that ran. Short, and the one you will use most.
From Base64Decode text
T1059.001T1027.010
2 operationsUntested