Microsoft released advanced hunting queries (AHQs) and a PowerShell script to find and recover some of the Windows application shortcuts deleted Friday morning by a buggy Microsoft Defender ASR rule.

Any time that I get ready to write a new PowerShell script, I have gotten in the habit of right clicking in my Scripts folder and choosing the New > Text Document commands from the shortcut menu.