Searching for malicious PowerShell executions with Intercept X