https://forensicitguy.github.io/inspecting-powershell-cobalt-strike-beacon/