Results for “evtxecmd”

Queries EVM blockchain data across 8 chains with USD pricing, including wallet portfolios, token info, transactions, gas, and contract inspection.

Parse Windows PowerShell Script Block Logs (Event ID 4104) from EVTX files to detect obfuscated commands, encoded payloads, and living-off-the-land techniques.

Parse and analyze Windows forensic artifacts including MFT, registry hives, prefetch files, event logs, LNK files, and jump lists using Eric Zimmerman's EZ Tools suite and KAPE.