Giulia Stocco

There might be a way to do this by P/Invoke using the example here: https://stackoverflow.com/questions/4432977/is-there-a-way-to-verify-if-a-windows-registry-key-is-volatile-reg-option-volat

Do you know if this is a regression? Did these collectors previously work on 2012? If so, what was the latest version you know works on 2012? From examining the...

For the Service Collector it appears that the .NET Framework version you have installed on Windows is not new enough. Installing 4.8 might resolve the issues with the Service and...

Thanks for the report. We did (attempt) to exclude "Cloud" files by default but the implementation may only work for OneDrive. You can use --skip-directories to skip the Google Drive...

As a stopgap we could make a .bat/.sh file that just runs "resources\AttackSurfaceAnalyzer.exe", and put everything into the resources directory.

I saw that this is going to be a native feature of .NET Core 3, at least on Windows platforms. I did experimentally create the running scripts, checked in in...

Unfortunately the .NET Core 3.0 approach is basically the warp packer approach, which is not desirable for our use case. Further minor experiments with other ILMerge type approaches haven't been...

The best workaround for now is to first install .NET Core and then run `dotnet tool install Microsoft.CST.AttackSurfaceAnalyzer.CLI` See [nuget.org](https://www.nuget.org/packages/Microsoft.CST.AttackSurfaceAnalyzer.CLI/)

This should be possible in .NET 5. https://devblogs.microsoft.com/dotnet/introducing-net-5/

Depends on https://github.com/dotnet/runtime/issues/36590 in .NET 5. `dotnet publish -r win-x64 /p:PublishSingleFile=true /p:IncludeNativeLibrariesInSingleFile=true` `dotnet publish -r linux-x64 /p:PublishSingleFile=true`