Mike mgstate

## FodhelperUACBypass.ps1
<#
.SYNOPSIS
    This script can bypass User Access Control (UAC) via fodhelper.exe

    It creates a new registry structure in: "HKCU:\Software\Classes\ms-settings\" to perform UAC bypass and starts
    an elevated command prompt.

.NOTES
    Function   : FodhelperUACBypass
    File Name  : FodhelperUACBypass.ps1

## PowerView-3.0-tricks.ps1
# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
#   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
#   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

# New function naming schema:
#   Verbs:
#       Get : retrieve full raw data sets
#       Find : ‘find’ specific data entries in a data set

## arkime-process-pcap.sh
#!/usr/bin/env bash
#Author:    Josh Stroschein (@jstrosch)
#Date:      28 Nov 2020
#Desc:      Script used to process a PCAP file with Arkime (formerly Moloch)

PCAP=$1

# Ensure there is at least one argument
if [ $# -eq 0 ]; then
    echo "[!] Usage: $0 'path to PCAP file'";
	<#
	.SYNOPSIS
	This script can bypass User Access Control (UAC) via fodhelper.exe

	It creates a new registry structure in: "HKCU:\Software\Classes\ms-settings\" to perform UAC bypass and starts
	an elevated command prompt.

	.NOTES
	Function : FodhelperUACBypass
	File Name : FodhelperUACBypass.ps1
	# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
	# tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

	# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
	# https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

	# New function naming schema:
	# Verbs:
	# Get : retrieve full raw data sets
	# Find : ‘find’ specific data entries in a data set
	#!/usr/bin/env bash
	#Author: Josh Stroschein (@jstrosch)
	#Date: 28 Nov 2020
	#Desc: Script used to process a PCAP file with Arkime (formerly Moloch)

	PCAP=$1

	# Ensure there is at least one argument
	if [ $# -eq 0 ]; then
	echo "[!] Usage: $0 'path to PCAP file'";