mirror of
https://github.com/Print3M/amsi-memory-patching
synced 2026-06-21 16:42:22 +00:00
Print3M
4 lines
270 B
PowerShell
4 lines
270 B
PowerShell
###
|
|
# GET SERVICES WITH UNQUOTED PATHS
|
|
###
|
|
Get-CimInstance win32_service | where PathName -notlike "" | where { $_.PathName.StartsWith('"') -eq $false }| select @{e={$_.PathName.split(" ")[0]};n="FirstPath"},PathName | where { $_.FirstPath.EndsWith(".exe") -eq $false } |