AMSITrigger

Hunting for Malicious Strings

Usage:

-i, --inputfile=VALUE Powershell filename

Usage: -i, --inputfile=VALUE Powershell filename -f, --format=VALUE Output Format: 1 - Only show Triggers 2 - Show Triggers with line numbers and columns 3 - Show Triggers inline with code 4 - Show AMSI calls (xmas tree mode) -m, --max=VALUE Maximum Line Length (default 2048) -h, -?, --help Show Help

For details see https://www.rythmstick.net/posts/amsitrigger