home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-analyzing-powershell-empire-artifacts-skill-md
debuggingtools
analyzing-powershell-empire-artifacts
Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
maintainer
mukul975
更新于 4/6/2026
星标
4240
分支
464
quick start
Installation and usage
Detect PowerShell Empire framework artifacts in Windows event logs by identifying Base64 encoded launcher patterns, default user agents, staging URL structures, stager IOCs, and known Empire module signatures in Script Block Logging events.
安装
$ install --globalskills.sh
使用
安装后，您可以通过在终端运行以下命令来使用此技能：
skills use analyzing-powershell-empire-artifacts