Skip to content

Instantly share code, notes, and snippets.

@ag-michael
Last active October 24, 2020 17:35
Show Gist options
  • Save ag-michael/d95bfa242f09b678688e0715c198bc60 to your computer and use it in GitHub Desktop.
Save ag-michael/d95bfa242f09b678688e0715c198bc60 to your computer and use it in GitHub Desktop.
Install Sysmon
powershell.exe -ep bypass -ec KABOAGUAdwAtAE8AYgBqAGUAYwB0ACAAUwB5AHMAdABlAG0ALgBOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ACkALgBEAG8AdwBuAGwAbwBhAGQARgBpAGwAZQAoACIAaAB0AHQAcABzADoALwAvAGQAbwB3AG4AbABvAGEAZAAuAHMAeQBzAGkAbgB0AGUAcgBuAGEAbABzAC4AYwBvAG0ALwBmAGkAbABlAHMALwBTAHkAcwBtAG8AbgAuAHoAaQBwACIALAAiAGMAOgBcAHUAcwBlAHIAcwBcACQAZQBuAHYAOgB1AHMAZQByAG4AYQBtAGUAXABhAHAAcABkAGEAdABhAFwAbABvAGMAYQBsAFwAdABlAG0AcABcAHMAeQBzAG0AbwBuAC4AegBpAHAAIgApADsARQB4AHAAYQBuAGQALQBBAHIAYwBoAGkAdgBlACAALQBGAG8AcgBjAGUAIAAtAFAAYQB0AGgAIAAiAGMAOgBcAHUAcwBlAHIAcwBcACQAZQBuAHYAOgB1AHMAZQByAG4AYQBtAGUAXABhAHAAcABkAGEAdABhAFwAbABvAGMAYQBsAFwAdABlAG0AcABcAHMAeQBzAG0AbwBuAC4AegBpAHAAIgAgAC0ARABlAHMAdABpAG4AYQB0AGkAbwBuAFAAYQB0AGgAIAAiAGMAOgBcAHUAcwBlAHIAcwBcACQAZQBuAHYAOgB1AHMAZQByAG4AYQBtAGUAXABhAHAAcABkAGEAdABhAFwAbABvAGMAYQBsAFwAdABlAG0AcABcAHMAeQBzAG0AbwBuACIAOwAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAQwBsAGkAZQBuAHQAKQAuAEQAbwB3AG4AbABvAGEAZABGAGkAbABlACgAIgBoAHQAdABwAHMAOgAvAC8AcgBhAHcALgBnAGkAdABoAHUAYgB1AHMAZQByAGMAbwBuAHQAZQBuAHQALgBjAG8AbQAvAG8AbABhAGYAaABhAHIAdABvAG4AZwAvAHMAeQBzAG0AbwBuAC0AbQBvAGQAdQBsAGEAcgAvAG0AYQBzAHQAZQByAC8AcwB5AHMAbQBvAG4AYwBvAG4AZgBpAGcALgB4AG0AbAAiACwAIgBjADoAXAB1AHMAZQByAHMAXAAkAGUAbgB2ADoAdQBzAGUAcgBuAGEAbQBlAFwAYQBwAHAAZABhAHQAYQBcAGwAbwBjAGEAbABcAHQAZQBtAHAAXABzAHkAcwBtAG8AbgBcAHMAeQBzAG0AbwBuAGMAbwBuAGYAaQBnAC4AeABtAGwAIgApADsAJgAiAGMAOgBcAHUAcwBlAHIAcwBcACQAZQBuAHYAOgB1AHMAZQByAG4AYQBtAGUAXABhAHAAcABkAGEAdABhAFwAbABvAGMAYQBsAFwAdABlAG0AcABcAHMAeQBzAG0AbwBuAFwAcwB5AHMAbQBvAG4ANgA0AC4AZQB4AGUAIgAgAC0AYQBjAGMAZQBwAHQAZQB1AGwAYQAgAC0AaQAgACIAYwA6AFwAdQBzAGUAcgBzAFwAJABlAG4AdgA6AHUAcwBlAHIAbgBhAG0AZQBcAGEAcABwAGQAYQB0AGEAXABsAG8AYwBhAGwAXAB0AGUAbQBwAFwAcwB5AHMAbQBvAG4AXABzAHkAcwBtAG8AbgBjAG8AbgBmAGkAZwAuAHgAbQBsACIAOwBMAGkAbQBpAHQALQBFAHYAZQBuAHQAbABvAGcAIAAtAEwAbwBnAG4AYQBtAGUAIABTAGUAYwB1AHIAaQB0AHkAIAAtAE0AYQB4AGkAbQB1AG0AUwBpAHoAZQAgADIARwBiACAALQBPAHYAZQByAGYAbABvAHcAQQBjAHQAaQBvAG4AIABPAHYAZQByAHcAcgBpAHQAZQBBAHMATgBlAGUAZABlAGQAOwBXAHIAaQB0AGUALQBIAG8AcwB0ACAAIgBGAGkAbgBpAHMAaABlAGQALgAiADsAWwBTAHkAcwB0AGUAbQAuAEMAbwBuAHMAbwBsAGUAXQA6ADoAUgBlAGEAZABLAGUAeQAoACQARgBBAEwAUwBFACkA
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment