abien

#!/usr/bin/env bash
set -u

# Read-only Shai-Hulud / Mini Shai-Hulud IOC scanner for Linux/WSL.
# Adapted from Manuel Kiessling's original macOS scanner:
# https://gist.githubusercontent.com/manuelkiessling/9b3dd90bf673a618630f69a2a334a0c4/raw/0392880be3d9c0a27bef0e76bf4037ea4fc5530a/mini-shai-hulud-ioc-scan-macos.sh
# Exits 1 when confirmed/suspicious IOCs are found, 0 otherwise.

RED=$'\033[0;31m'; GRN=$'\033[0;32m'; YLW=$'\033[0;33m'; BLD=$'\033[1m'; RST=$'\033[0m'
HITS=0

abien

Keybase proof

I hereby claim:

• I am abien on github.
• I am abiendus (https://keybase.io/abiendus) on keybase.
• I have a public key ASDpCPd8ZQ_PuKB3JT0bro3pt4-Qe1gkwBZqNUuHos_h-go

To claim this, I am signing this object: