CmdID

CmdID / PowerShell / Cmdlets / Install

Install-TransportAgent

Use the Install-TransportAgent cmdlet to register transport agents on Exchange servers. Exchange PowerShell reference

From the Exchange PowerShell reference 7 parameters 1 Sigma rule looks for it Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

7 in the Exchange PowerShell reference
-NameThe Name parameter specifies the display name of the transport agent to be installed.
-AssemblyPathThe AssemblyPath parameter specifies the location of the transport agent Microsoft.NET assembly.
-TransportAgentFactoryThe TransportAgentFactory parameter specifies the Microsoft.NET class type of the transport agent factory.
-Confirm, -cfThe Confirm switch specifies whether to show or hide the confirmation prompt.
-DomainControllerThe DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory.
-TransportServiceThe TransportService parameter specifies the transport service that you want to view or modify.
-WhatIf, -wiThe WhatIf switch shows what the command does without making any changes.

What looks for it

Sigma process creation rules that name Install-TransportAgent
mediumMSExchange Transport Agent InstallationTobias Michalski (Nextron Systems)