List of PowerShell commands and commandlets that should be in your Powershel watchlist. Some of the commands listed here are used legitimately. There is no doubt some allow listing will be required in your enviroment.
For more information on setting up Powershell logging, please see: https://medium.com/@secprentice/powershell-logging-ab06d4d3ca6