AMSITrigger

Hunting for Malicious Strings

Usage:

-i, --inputfile=VALUE   Powershell filename
-f, --format=VALUE      Output Format:
                            1 - Only show Triggers
                            2 - Show Triggers with Line numbers
                            3 - Show Triggers inline with code
                            4 - Show AMSI calls (xmas tree mode)
-m, --max=VALUE         Maximum line length (default 2048)
-h, -?, --help

For details see https://www.rythmstick.net/posts/amsitrigger