neonprimetime security , just trying to help

  This folder is applocker blocked       So I copied notepad.exe into it, renamed it, then tried to execute and as you can see applocker blo...

get-winevent -filterhashtable @{logname="Microsoft-Windows-Sysmon/Operational";id=1} | select Message |foreach-object {$a = $_.Mes...