Quickie: CyberChef & Microsoft Script Decoding, (Sat, Oct 29th)
SANS Internet Storm Center, InfoCON: green 2022-10-29
This week I discovered a CyberChef operation I didn't know existed, but I'm quite familiar with the algorythm: "Microsoft Script Decoder" (it's been there at least since 2017).
JScript and VBScript scripts can be encoded, and are usually given the extensions .jse or .vbe respectively.
CyberChef can decode these scripts:
Didier Stevens Senior handler Microsoft MVP blog.DidierStevens.com
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.