home/categories/debugging/tsale-awesome-dfir-skills-skills-hunting-suspicious-powershell-hunt-skill-md

debuggingtools

suspicious-powershell-hunt-cross-platform-ideas

Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.

maintainer

tsale

업데이트됨 2026. 1. 18.

스타

213

포크

quick start

Installation and usage

Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.

설치

$ install --globalskills.sh

사용법

설치 후 터미널에서 다음 명령을 실행하여 이 스킬을 사용할 수 있습니다:

skills use suspicious-powershell-hunt-cross-platform-ideas