PureLogs JS-to-PowerShell Decryption

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•2

Detects wscript.exe spawning PowerShell with encoded command from C:\Temp.