Scripts and notes for performing Windows malware investigations via differential analysis using PowerShell, Velociraptor and Excel! Context = You've had an alert/event and need to investigate possible ...

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License, please attribute to Don Jones, Matt Penny, Carlos Perez, Joel Bennett and the PowerShell Community. The ...