# Forensics

### Decoding Malicious PowerShell

{% embed url="<https://community.sophos.com/sophos-labs/b/blog/posts/decoding-malicious-powershell>" %}
