Why would you need anything "next gen" for that? Just log use of powershell then have your good old SIEM system alert when it's used by a group outside of the

Why would you need anything "next gen" for that? Just log use of powershell then have your good old SIEM system alert when it's used by a group outside of the IT dept.