Windows PowerShell "cp" execution attempt (Parameter)

ensure that you select correct server tech entries in the asm profile, e.g. dont include windows if the webserver is not windows based.
if above is correctly done but you still get false positive then you need to allow that particular traffic.

i had similar thing on waf config for car dealership.
there were sql injection false positives because of many "select" in the submited web forms.