Dave Hull
Dave Hull
Lots of code duped in here. Refactor this thing with a function or something to get rid of the duplication.
May look at adding a Select-Object statement to this collector as the output is inconsistent across many hosts, making stack-ranking more challenging.
Create an module and/or analysis script that can generate leads for DLL Search Order hijacking.
Add a flag for running Kansa in an analysis only mode for data that has already been collected. The user will configure the .\Analysis\Analysis.conf file according to their needs, then...
Based on recent experience running in an older environment, some tweaks had to be made to make Kansa.ps1 run. Do more extensive testing on PSv2 systems and find solutions to...
Either figure out a way to automate turning the output of this script into the where clause of other Get-Netstat*.ps1 scripts or document the usefulness of this in a blog...
Write an analysis script for looking up hashes from Autoruns and other collected data against Virus Total, maintain a local db of known good/bad so they don't have to be...
I recall seeing something about a unit testing framework for PowerShell. Look into it and see if we can use it for some automated testing.
This function is too long and doing too many things. Refactor it into multiple smaller functions with high cohesion.