Just a heads up, logging events in IIS logs etc. after vulnerability scanning are triggering Infection Alerts on this script. We determined and correlated the sources from our 3rd party vulnerability scanning engines and flagged as false positive.
thank you for putting this script together!