Threat Hunting Mis-Behaving PowerShells: Examining the Host