List of PowerShell commands and commandlets that should be in your Powershel watchlist. Some of the commands listed here are used legitimately. There is no doubt some whitelisting will be required in your enviroment. We hope to keep this list current and updated at least weekly.
For more information on setting up Powershell logging, please see: https://medium.com/@secprentice/powershell-logging-ab06d4d3ca6