Hi everyone, I created this little tool in Rust to generate obfuscated looking glob patterns for paths by utilizing the default environment variables in Windows PowerShell.

You can check it out here: https://github.com/lavafroth/envy-rs

This can probably be used in conjunction with some other tools to bypass AV/EDR.

As you can guess, I’m not a PowerShell ninja. I did not come up with the idea. I learned about it from this video by John Hammond. I merely implemented the code.