From cf4bd6f55df16529ab11ccd7e88d5de2e5292eda Mon Sep 17 00:00:00 2001 From: Print3M <92022497+Print3M@users.noreply.github.com> Date: Sun, 5 May 2024 20:10:05 +0200 Subject: [PATCH] fix --- amsi-memory-patching/README.md => README.md | 0 one-liners.ps1 | 4 ---- .../script-obfuscated.ps1 => script-obfuscated.ps1 | 0 amsi-memory-patching/script.ps1 => script.ps1 | 0 4 files changed, 4 deletions(-) rename amsi-memory-patching/README.md => README.md (100%) delete mode 100644 one-liners.ps1 rename amsi-memory-patching/script-obfuscated.ps1 => script-obfuscated.ps1 (100%) rename amsi-memory-patching/script.ps1 => script.ps1 (100%) diff --git a/amsi-memory-patching/README.md b/README.md similarity index 100% rename from amsi-memory-patching/README.md rename to README.md diff --git a/one-liners.ps1 b/one-liners.ps1 deleted file mode 100644 index f448814..0000000 --- a/one-liners.ps1 +++ /dev/null @@ -1,4 +0,0 @@ -### -# GET SERVICES WITH UNQUOTED PATHS -### -Get-CimInstance win32_service | where PathName -notlike "" | where { $_.PathName.StartsWith('"') -eq $false }| select @{e={$_.PathName.split(" ")[0]};n="FirstPath"},PathName | where { $_.FirstPath.EndsWith(".exe") -eq $false } \ No newline at end of file diff --git a/amsi-memory-patching/script-obfuscated.ps1 b/script-obfuscated.ps1 similarity index 100% rename from amsi-memory-patching/script-obfuscated.ps1 rename to script-obfuscated.ps1 diff --git a/amsi-memory-patching/script.ps1 b/script.ps1 similarity index 100% rename from amsi-memory-patching/script.ps1 rename to script.ps1