home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-analyzing-powershell-empire-artifacts-skill-md
debuggingtools
analyzing-powershell-empire-artifacts
Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
maintainer
mukul975
Atualizado 4/6/2026
Estrelas
4240
Forks
464
quick start
Installation and usage
Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
Instalação
$ install --globalskills.sh
Uso
Depois de instalar, você pode usar esta skill executando o seguinte comando no terminal:
skills use analyzing-powershell-empire-artifacts