Used as part of the Powershell pester
Pester.bat [/help|?|-?|/?] "$null; notepad"
Execute code using Pester. The third parameter can be anything. The fourth is the payload. Example here executes notepad
Proxy execution
c:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\bin\Pester.bat, c:\Program Files\WindowsPowerShell\Modules\Pester\*\bin\Pester.bat
Sigma: https://github.com/SigmaHQ/sigma/blob/683b63f8184b93c9564c4310d10c571cbe367e1e/rules/windows/process_creation/proc_creation_win_lolbin_pester_1.yml
Emin Atac (@p0w3rsh3ll), Stamatis Chatzimangou (@_st0pp3r_)