Hunting Ransomware with Powershell scripts
Here you can download the full scripts from the Hunting IOC with Powershell series. Just click the image below.
Filename: cyberforce_Powershell_ioc.zip // MD5 verification: 013b33cebc1e5c0880eaa345f2a0d929
To make sure your restriction policy does not mess up the scripts because the content was downloaded from the internet, execute the following commands to unblock the downloaded content (after you verified that the scripts do not contain any evil code of course )
Unblock-File .\PS_IOC.ps1 Unblock-File .\IOCFunctions.ps1