GitHub repository: n0kovo/ThreatCheck
Description: Identifies the bytes that Microsoft Defender  / AMSI Consumer flags on.