Marcus Edmondson medmondson44

I am an information security professional who loves threat hunting and analysis with Python and PowerShell.

jaredcatkinson / Get-InjectedThread.ps1

Last active October 1, 2024 18:37

Code from "Taking Hunting to the Next Level: Hunting in Memory" presentation at SANS Threat Hunting Summit 2017 by Jared Atkinson and Joe Desimone

	function Get-InjectedThread
	{
	<#

	.SYNOPSIS

	Looks for threads that were created as a result of code injection.

	.DESCRIPTION