PowerShell7Config

PowerShell 7 Runtime Config

Windows
1 path
powershell.config.json
Version 1
Andrew Rathbun

Paths on disk

1 path

References

1 link

learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_powershell_config?view=powershell-7.3(opens in new tab)

Collect it

KAPE command line for PowerShell7Config

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target PowerShell7Config

Run with administrator privileges. KAPE Documentation

Decode with CyberChef

1 recipe for this artifact

Unicode DecodeDecode Unicode escape sequences(opens in new tab)