John Franklin

Powershell Check IOC

Found a script to check for indicators of compromise. Works w/Nagios, can run at command line. Unmodified with original authors comments. Usage: Copy the .ps1 to the system you are investigating. Open Powershell as...

Robocopy with log

Copy data from one machine to another. Save transfer log. Switches to copy subfolders, preserve security and timestamps. Wait one second and repeat 0 times.