search

danielbohannon / Revoke-Obfuscation

PowerShell Obfuscation Detection Framework
Apache License 2.0
725 stars 118 forks source link

Path of the obfuscated script block #26

Open huebicode opened 1 year ago

huebicode commented 1 year ago

Please add the path of the obfuscated script block to the metadata output, so you don't have to jump between the event viewer and Revoke-Obfuscation to get the origin of the script block.

Thanks in advance Alex