WSA is exceptionally powerful in that I can tell clients to download and run a file from the internet.
This is also exceptionally dangerous. As it is right now, only two people in our entire company are allowed to use it because of this. You know, so someone doesn't send a command to wipe all our computers.
I like to send download+run commands for the Microsoft MSERT tool to endpoints with recent detections.
Please add a command of 'administrator-defined download+run commands' that I and others can select from.