Invoke-ExchangeWebShellHunter PowerShell script for hunting webshells on Microsoft Exchange Servers. Relies on Invoke-IR/PowerForensics: https://github.com/Invoke-IR/PowerForensics Still in development, will eventually create a pull request for PowerForensics.