Agent Cobra Bubbles thatguy031415

## keybase.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                thatguy031415
                / keybase.md
            
            
              Created
              August 29, 2017 15:06
            
          
    Keybase proof

I hereby claim:

I am thatguy031415 on github.
I am biebsmalwareguy (https://keybase.io/biebsmalwareguy) on keybase.
I have a public key ASD1FqZ-BvfVHHKH2mk-pzHrvqmqS632S7b9TMqZqyNwjAo

To claim this, I am signing this object:

  
## ransomcanary.ps1
<#
Powershell script to create and monitor a ransomware canary file;
If the canary is modified, the script will notify the user, log the data,
create an entry in the event log, and stop the workstation service,
crippling the machine's ability to map or access network drives.
Modified from a script found at freeforensics.org
#>


$DirPath = "C:\Temp\"
	<#
	Powershell script to create and monitor a ransomware canary file;
	If the canary is modified, the script will notify the user, log the data,
	create an entry in the event log, and stop the workstation service,
	crippling the machine's ability to map or access network drives.
	Modified from a script found at freeforensics.org
	#>


	$DirPath = "C:\Temp\"