PS2EXE VS PoshRSJob

If you have powershell scripts for your Users you can also try ps2exe. https://github.com/MScholtes/PS2EXE

PS2EXE -- This is what I've used in the past to create a exe from a PS script. Would suggest reading the readme on Github to understand the possible behavior changes while using it.

Something like using this: https://github.com/MScholtes/PS2EXE Although I'm sure there are other utilities out there that do something similar. It's not 100% absolutely secure, because I'm pretty sure that .exe can be de-compiled and read, but at least the password wouldn't be in a .log file (if passed as a parameter), nor clearly in a downloaded {random guid}.ps1 in the CM folder.

PS2EXE

To run with PowerShell save this to a text file with a .ps1 extension. Then right click and run with PowerShell. Orrrr...how I did it is I converted the .ps1 to .exe using ps2exe here https://github.com/MScholtes/PS2EXE/blob/master/README.md. Then just run the exe and just a black terminal screen shows up blank and script runs in the background. To stop the script just close out the black terminal screen. The exe way is better if someone monitors your screen from time to time because it doesn't show what's really going on.

As for how: Been using ps2exe for small app for a client. It's ok, but that's when you already got a script and wanna pack it into exe: https://github.com/MScholtes/PS2EXE

Right from the README.MD...

Yes and no. Maybe this theoretical miner would stop mining to drop GPU usage but who knows what else it's doing or data it's exfiltrating. I at one point (for fun) wrote a key-logger entirely in PowerShell and was wrapped as an executable and ran under the name "Windows Software Update" or something like that... it was a long time ago. The process itself would still be there but malware can be pretty good about disguising itself as other things. Keep in mind what I said about looking for the taskmgr process is probably the most basic way to do this. If someone is writing a legitimate sophisticated malware they're probably not writing it in as a simple .NET FX console app and you're better off just nuking your system and starting fresh.

The module utilizes runspaces using PoshRSJob for some tasks. The scripts that are run inside these runspaces are going to be provided as part of the module. There are considered private and not intended to be altered or run directly.

The easiest part to multithread would be the part where you're searching for your pattern. Which can be done in many different ways. Some multithreading examples are linked below. ThreadJob module PoshRSJob module Runspacepool class

A for loop is slightly faster than a foreach loop. Even faster would be to iterate through them in parallel. I'd recommend a read through this rather good blog post https://adamtheautomator.com/powershell-multithreading/ Which is comprehensive in the subject. I'd recommend one of these three options in this regard. PoshRSJob (Module) ThreadJob (Module) Runspacepool (Native. Most complex) Good example to build upon https://learn-powershell.net/2018/01/28/dealing-with-runspacepool-variable-scope-creep-in-powershell/

On Posh 5.1, you use PoshRSJob.