Invoke-EDRChecker icon indicating copy to clipboard operation
Invoke-EDRChecker copied to clipboard

Published 20 hours ago • verified publisher icon PwnDexter

Add sysinternals

Open nemesis7331 opened this issue 4 years ago • 0 comments

Hi,

what about checking if any sysinternal is in use? I usually use this query:

reg query HKEY_CURRENT_USER\Software\Sysinternals

Thx!

nemesis7331 avatar Oct 15 '20 21:10 nemesis7331