Skip to content

Instantly share code, notes, and snippets.

@Purp1eW0lf
Created April 4, 2022 10:26
Show Gist options
  • Save Purp1eW0lf/6b5f8b37ad7de9c7e568b144d9be7cfe to your computer and use it in GitHub Desktop.
Save Purp1eW0lf/6b5f8b37ad7de9c7e568b144d9be7cfe to your computer and use it in GitHub Desktop.
# Download and use script
wget -usebasicparsing https://raw.githubusercontent.com/mgreen27/Invoke-LiveResponse/master/Content/Other/Get-BAMParser.ps1 -outfile Get-BAMParser.ps1;
./Get-BAMParser.ps1 | out-string
# run and look at BAM manually
reg query "HKLM\SYSTEM\CurrentControlSet\Services\bam\state\UserSettings" /s
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment