From 927595c5495bce479765488fbbb04553a4543fcc Mon Sep 17 00:00:00 2001 From: Eric Conrad Date: Tue, 20 Sep 2016 15:47:31 -0400 Subject: [PATCH] Update README.md --- README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/README.md b/README.md index 067798f..ade022c 100644 --- a/README.md +++ b/README.md @@ -17,6 +17,18 @@ Sample evtx files are in the .\evtx directory `.\DeepBlue.ps1 ` +If you see this error: + +`.\DeepBlue.ps1 : File C:\Users\sec580\Desktop\DeepBlueCLI-0.1\DeepBlue.ps1 cannot be loaded because running scripts is +disabled on this system. For more information, see about_Execution_Policies at +http://go.microsoft.com/fwlink/?LinkID=135170.` + +You must run Set-ExecutionPolicy as Administrator, here is an example: + +`Set-ExecutionPolicy RemoteSigned` + +See `get-help Set-ExecutionPolicy` for more options. + ## Examples: ### Process local Windows security event log: