File and Folder Query
Here are the articles in this section:
Query for malicious file types in all users and system temp directories
Query Malicious file types from any directory not including the default OS and Install directories
Query all users for their Powershell Profile content for Powershell, Powershell_ISE, and VS Code
Query to Determine if any lolbin files are installed outside the normal OS and Program Files dir's