home/categories/debugging/tsale-awesome-dfir-skills-skills-hunting-suspicious-powershell-hunt-skill-md
quick start
Installation and usage
Hypothesis-driven hunt plan for suspicious PowerShell, plus query snippets for common telemetry.
安裝
$ install --globalskills.sh
使用
安裝後，您可以通過在終端運行以下命令來使用此技能：
skills use suspicious-powershell-hunt-cross-platform-ideas