A suspicious PowerShell script execution was detected on endpoint 192.168.1.25, initiated by user jdoe. The script was executed without leaving traces on disk, leveraging fileless techniques to evade traditional antivirus solutions. The PowerShell command attempted to download additional payloads from a suspicious domain.