p0w3rsh3ll / DeepBlue

p0w3rsh3ll/DeepBlue Issues

cmd special characters
Updated 2 years ago
Skip 4688 events if the -AlertAllAdmin switch is used
Closed 4 years ago1
Add the details of accounts involved in failed logons
Closed 4 years ago1
Add a new parameter to check the last N hours
Closed 4 years ago1
Set a fake event ID for 'Multiple admin logons for one account' messages
Closed 4 years ago1
Change the date property for event id 4672 "Multiple admin logons"
Closed 4 years ago1
Failed to convert from BASE64
Closed 4 years ago1
The user may be empty for some 4625 events
Closed 4 years ago
Another non decoded BASE64
Updated 4 years ago
Microsoft-Windows-AppLocker/EXE and DLL
Closed 4 years ago1
Microsoft-Windows-AppLocker/MSI and Script
Closed 4 years ago2
$decoded empty string
Updated 4 years ago
PowerShell 4104
Updated 4 years ago