PowerShell script for hunting webshells on Microsoft Exchange Servers.
Relies on Invoke-IR/PowerForensics: https://github.com/Invoke-IR/PowerForensics
Still in development, will eventually create a pull request for PowerForensics.
PowerShell script for hunting webshells on Microsoft Exchange Servers.
PowerShell
PowerShell script for hunting webshells on Microsoft Exchange Servers.
Relies on Invoke-IR/PowerForensics: https://github.com/Invoke-IR/PowerForensics
Still in development, will eventually create a pull request for PowerForensics.