added SwiftOnSysmon Flipper version

This commit is contained in:
Matze 2022-12-22 18:00:37 -06:00 committed by GitHub
parent 24cab4c2fb
commit a24e959d00
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 22 additions and 0 deletions

View file

@ -0,0 +1,22 @@
REM TITLE Sysmon
REM AUTHOR Matze
REM Version: 1.0
REM Target: Windows
REM DESCRIPTION: A payload used to install Sysmon with the SwiftOnSecurity rules
DELAY 3000
GUI r
DELAY 500
STRING powershell saps PowerShell -verb runas
ENTER
REM The delay below is a longer delay for admins to put in passwords if needed.
DELAY 8000
REM Stage 2 (Downloading files)
STRING Invoke-WebRequest -Uri "DROPBOX LINK HERE" -OutFile "C:\sysmon.zip"
ENTER
DELAY 8000
STRING Expand-Archive C:\sysmon.zip -DestinationPath "C:\Sysmon"
ENTER
DELAY 5000
STRING C:\Sysmon\Sysmon.ps1
ENTER

Binary file not shown.