Windows 10 can detect suspicious PowerShell activities, code injection, and malicious documents, including attacks where a process connects to a web server and starts dropping and launching an app, Microsoft says.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/YtO9wsi8l7k/windows-10-can-detect-powershell-attacks-microsoft