msticpy.analysis.code_cleanup module

Code cleanup functions to re-format obfuscated code.

msticpy.analysis.code_cleanup.format_powershell(code: str) str

Cleanup obfuscated powershell.

Parameters:

code (str) – Powershell code segment.

Returns:

Reformatted code.

Return type:

str

Notes

This function is purely for displaying intentionally obfuscated code, it will likely not return executable code.