├── Invoke-DOSfuscation.psd1 ├── Invoke-DOSfuscation.psm1 ├── Invoke-DOSfuscationMenu.psm1 ├── Invoke-DOSfuscationTestHarness.psm1 ├── LICENSE ├── README.md ├── Samples ├── DYNAMIC_SECURITY_EID4688_1-of-4_Out-DosConcatenatedCommand.evtx ├── DYNAMIC_SECURITY_EID4688_2-of-4_Out-DosReversedCommand.evtx ├── DYNAMIC_SECURITY_EID4688_3-of-4_Out-DosFORcodedCommand.evtx ├── DYNAMIC_SECURITY_EID4688_4-of-4_Out-DosFINcodedCommand.evtx ├── DYNAMIC_SYSMON_EID1_1-of-4_Out-DosConcatenatedCommand.evtx ├── DYNAMIC_SYSMON_EID1_2-of-4_Out-DosReversedCommand.evtx ├── DYNAMIC_SYSMON_EID1_3-of-4_Out-DosFORcodedCommand.evtx ├── DYNAMIC_SYSMON_EID1_4-of-4_Out-DosFINcodedCommand.evtx ├── STATIC_1-of-4_Out-DosConcatenatedCommand.txt ├── STATIC_2-of-4_Out-DosReversedCommand.txt ├── STATIC_3-of-4_Out-DosFORcodedCommand.txt └── STATIC_4-of-4_Out-DosFINcodedCommand.txt └── Tests └── Invoke-DOSfuscation.tests.ps1 /Invoke-DOSfuscation.psd1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Invoke-DOSfuscation.psd1 -------------------------------------------------------------------------------- /Invoke-DOSfuscation.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Invoke-DOSfuscation.psm1 -------------------------------------------------------------------------------- /Invoke-DOSfuscationMenu.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Invoke-DOSfuscationMenu.psm1 -------------------------------------------------------------------------------- /Invoke-DOSfuscationTestHarness.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Invoke-DOSfuscationTestHarness.psm1 -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/README.md -------------------------------------------------------------------------------- /Samples/DYNAMIC_SECURITY_EID4688_1-of-4_Out-DosConcatenatedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SECURITY_EID4688_1-of-4_Out-DosConcatenatedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SECURITY_EID4688_2-of-4_Out-DosReversedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SECURITY_EID4688_2-of-4_Out-DosReversedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SECURITY_EID4688_3-of-4_Out-DosFORcodedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SECURITY_EID4688_3-of-4_Out-DosFORcodedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SECURITY_EID4688_4-of-4_Out-DosFINcodedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SECURITY_EID4688_4-of-4_Out-DosFINcodedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SYSMON_EID1_1-of-4_Out-DosConcatenatedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SYSMON_EID1_1-of-4_Out-DosConcatenatedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SYSMON_EID1_2-of-4_Out-DosReversedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SYSMON_EID1_2-of-4_Out-DosReversedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SYSMON_EID1_3-of-4_Out-DosFORcodedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SYSMON_EID1_3-of-4_Out-DosFORcodedCommand.evtx -------------------------------------------------------------------------------- /Samples/DYNAMIC_SYSMON_EID1_4-of-4_Out-DosFINcodedCommand.evtx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/DYNAMIC_SYSMON_EID1_4-of-4_Out-DosFINcodedCommand.evtx -------------------------------------------------------------------------------- /Samples/STATIC_1-of-4_Out-DosConcatenatedCommand.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/STATIC_1-of-4_Out-DosConcatenatedCommand.txt -------------------------------------------------------------------------------- /Samples/STATIC_2-of-4_Out-DosReversedCommand.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/STATIC_2-of-4_Out-DosReversedCommand.txt -------------------------------------------------------------------------------- /Samples/STATIC_3-of-4_Out-DosFORcodedCommand.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/STATIC_3-of-4_Out-DosFORcodedCommand.txt -------------------------------------------------------------------------------- /Samples/STATIC_4-of-4_Out-DosFINcodedCommand.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Samples/STATIC_4-of-4_Out-DosFINcodedCommand.txt -------------------------------------------------------------------------------- /Tests/Invoke-DOSfuscation.tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/danielbohannon/Invoke-DOSfuscation/HEAD/Tests/Invoke-DOSfuscation.tests.ps1 --------------------------------------------------------------------------------