Check if a Metasplot service has been installed on your Windows computer (osquery)

Description: Metasploit 16 character service names

SQL:

SELECT * FROM services 
WHERE LENGTH(display_name) = 16 AND path LIKE '%powershell%';

Operating Systems: Windows Only

Reference:

• https://raw.githubusercontent.com/puffyCid/osquery-packs/master/windows/metasploit.conf

#dfir #metasploit #meterpreter #threat_hunting