baileydauterman

Json output instead of csv for detections

3

I have a thought on a somewhat easy way to transition from csv to json if that is something that you're interested in. In quite a few places where detections...

Break the large script into multiple smaller scripts to make maintenance easier.

2

Here I have dissected the 17,613 line `trawler.ps1` script into a myriad of smaller more manageable scripts. The original `trawler.ps1` script can be created by running the `build.ps1` script. Here...

Script level todos

1

- [ ] JSON Detection Output to easily encapsulate more details - [ ] Non-Standard Service/Task running as/created by Local Administrator - [ ] Browser Extension Analysis - [ ]...

Implement Registry check for default notification values

1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon - Notify Value Investigate for value/defaults and add to appropriate Winlogon Helper check (winlogongnotificationpackage)[https://github.com/persistence-info/persistence-info.github.io/blob/main/Data/winlogonnotificationpackage.md]

Update to allow for json output

2

Update the arguments taken in by trawler.ps1 to allow for new json output format. Detriment of json output is that it cannot be written until all values have been collected...