### Overview
Post detection of initial access, a malicious PowerShell script was executed on the compromised server. This script is designed to establish further foothold and facilitate persistence.

### Script Capabilities
- **Functionality**: Downloads additional payloads, creates backdoors.
- **Indicators of Compromise (IoCs)**: Presence of encoded PowerShell commands in logs.

### Recommendations
- Immediate isolation of affected systems.
- Conduct memory forensics to identify and remove malicious scripts.

### Next Steps
Be vigilant for persistence mechanisms that may have been installed to enable repeated access to the network.