1
1
# -------------------------------------------
2
2
# Function: Invoke-PowerHunt
3
3
# -------------------------------------------
4
- # Version: 0.65
4
+ # Version: 0.66
5
5
# Author: Scott Sutherland (@_nullbind), NetSPI 2022
6
6
function Invoke-PowerHunt
7
7
{
@@ -121,7 +121,7 @@ function Invoke-PowerHunt
121
121
$null = $ModuleOutputSummary.Columns.Add (" CollectSource" )
122
122
$null = $ModuleOutputSummary.Columns.Add (" AnalyzeModule" )
123
123
$null = $ModuleOutputSummary.Columns.Add (" AnalyzeModuleDesc" )
124
- $null = $ModuleOutputSummary.Columns.Add (" FindingType " )
124
+ $null = $ModuleOutputSummary.Columns.Add (" InstanceType " )
125
125
$null = $ModuleOutputSummary.Columns.Add (" InstanceCount" )
126
126
$null = $ModuleOutputSummary.Columns.Add (" ComputerCount" ) # Computers with 1 or more instances
127
127
@@ -915,14 +915,15 @@ function Invoke-PowerHunt
915
915
foreach {
916
916
917
917
# Get variables
918
- $AnalyzeModule = $_.AnalyzeModule
919
- $AnalyzeModuleDesc = $_.AnalyzeModuleDesc
918
+ $ModuleType = $_.ModuleType
920
919
$CollectModule = $_.CollectModule
921
920
$CollectSource = $_.CollectSource
922
- $ComputerCount = $_.ComputerCount
923
- $FindingType = $_.FindingType
921
+ $AnalyzeModule = $_.AnalyzeModule
922
+ $AnalyzeModuleDesc = $_.AnalyzeModuleDesc
923
+ $InstanceType = $_.InstanceType
924
924
$InstanceCount = $_.InstanceCount
925
- $ModuleType = $_.ModuleType
925
+ $ComputerCount = $_.ComputerCount
926
+
926
927
927
928
# Get length for $CollectSource - apparently not needed for powershell substrings
928
929
$CollectSourceLen = $CollectSource.Length
@@ -935,14 +936,14 @@ function Invoke-PowerHunt
935
936
936
937
# Build object
937
938
$object = New-Object PSObject
938
- $object | add-member AnalyzeModule $AnalyzeModule
939
- $object | add-member AnalyzeModuleDesc $AnalyzeModuleDesc
939
+ $object | add-member ModuleType $ModuleType
940
940
$object | add-member CollectModule $CollectModule
941
941
$object | add-member CollectSource $CollectSourceNew
942
- $object | add-member ComputerCount $ComputerCount
943
- $object | add-member FindingType $FindingType
942
+ $object | add-member AnalyzeModule $AnalyzeModule
943
+ $object | add-member AnalyzeModuleDesc $AnalyzeModuleDesc
944
+ $object | add-member InstanceType $InstanceType
944
945
$object | add-member InstanceCount $InstanceCount
945
- $object | add-member ModuleType $ModuleType
946
+ $object | add-member ComputerCount $ComputerCount
946
947
947
948
# Return object
948
949
$object
0 commit comments