Invoke-IR/Volatility — pull request #2 by iquaba (2014-08-06 15:59:34+00:00)
Title: Update malsysproc.py

svchost.exe -k bthsvcs is used to launching Microsoft Bluetooth support service.