1
2
3
4
5 from lib.common.abstracts import Package
6
7
8
10 """PowerShell analysis package."""
11 PATHS = [
12 ("SystemRoot", "system32", "WindowsPowerShell", "v1.0", "powershell.exe"),
13 ("SystemRoot", "system32", "WindowsPowerShell", "v2.0", "powershell.exe"),
14 ("SystemRoot", "system32", "WindowsPowerShell", "v3.0", "powershell.exe"),
15 ]
16
18 powershell = self.get_path("PowerShell")
19 args = "-NoProfile -ExecutionPolicy unrestricted -File \"{0}\"".format(path)
20 return self.execute(powershell, args)
21