LoFP / legitimate use of pester for writing tests for powershell scripts and modules

condition: all of selection_*
selection_cli:
  ParentCommandLine|contains:
  - '{ Invoke-Pester -EnableExit ;'
  - '{ Get-Help "'
selection_module:
  ParentCommandLine|contains: \WindowsPowerShell\Modules\Pester\
  ParentImage|endswith:
  - \powershell.exe
  - \pwsh.exe

cmd_execution:
  CommandLine|contains|all:
  - pester
  - ;
  Image|endswith: \cmd.exe
condition: powershell_module or (cmd_execution and get_help)
get_help:
  CommandLine|contains:
  - help
  - \?
powershell_module:
  CommandLine|contains|all:
  - Pester
  - Get-Help
  Image|endswith:
  - \powershell.exe
  - \pwsh.exe