Python script to extract powershell scrips from elasticsearch based on windows event "4104" - View it on GitHub