---

Get-ChildItem $env:USERPROFILE\Downloads | Sort-Object LastWriteTime -Descending | Select-Object -First 20 Name, Length, LastWriteTime | Format-Table -AutoSize

Get-ChildItem $env:USERPROFILE -Recurse -File -ErrorAction SilentlyContinue | Where-Object { $_.LastWriteTime -gt (Get-Date).AddDays(-1) } | Sort-Object LastWriteTime -Descending | Select-Object -First 50 FullName, Length, LastWriteTime | Format-Table -AutoSize -Wrap

Get-AuthenticodeSignature "$env:USERPROFILE\Downloads\имя_файла.exe" | Select-Object Status, StatusMessage, @{n='Издатель';e={$_.SignerCertificate.Subject}}

Get-Content "$env:USERPROFILE\Downloads\имя_файла.exe" -Stream Zone.Identifier -ErrorAction SilentlyContinue

Get-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*, HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* -ErrorAction SilentlyContinue | Where-Object { $_.InstallDate } | Sort-Object InstallDate -Descending | Select-Object -First 20 DisplayName, InstallDate | Format-Table -AutoSize

Get-CimInstance Win32_StartupCommand | Select-Object Name, Command, Location | Format-Table -AutoSize -Wrap

Start-MpScan -ScanType CustomScan -ScanPath "$env:USERPROFILE\Downloads"

Get-MpThreatDetection | Select-Object -Last 10 | Format-List