### Overview
Following the execution of the spear phishing attack, a malicious PowerShell script was detected. This script is designed to further compromise the network.

### Analysis
- **Script Functionality:** The script attempts to download additional payloads and establish a connection back to the attacker's command and control server.
- **Indicators of Compromise (IoCs):** Unusual PowerShell commands observed, including obfuscated and encoded scripts.

### Next Steps
- **Mitigation:** Disable PowerShell scripting for non-administrative users and review execution logs.
- **Preparation for Next Alert:** Monitor registry changes as the attacker may attempt to establish persistence.