home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-analyzing-powershell-empire-artifacts-skill-md
debuggingtools

analyzing-powershell-empire-artifacts

Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.

mukul975
maintainer
mukul975
更新日 4/6/2026
スター
4240
フォーク
464
quick start

Installation and usage

Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.

インストール
$ install --globalskills.sh
使い方

インストール後、ターミナルで以下のコマンドを実行してこのスキルを使用できます:

skills use analyzing-powershell-empire-artifacts