Skip to content

Convert text output to PSCustomObject output#2

Open
infosec-intern wants to merge 18 commits into
sans-blue-team:masterfrom
infosec-intern:master
Open

Convert text output to PSCustomObject output#2
infosec-intern wants to merge 18 commits into
sans-blue-team:masterfrom
infosec-intern:master

Conversation

@infosec-intern

Copy link
Copy Markdown

I tried to preserve at least part of the previous text output by using the Write-{Verbose,Debug,Warning} functions

I've found that the descriptions (or Message attribute) look much better when piped to Format-List because they are output as arrays and don't get enough screen real estate otherwise

Thoughts on the output formats or anything else? Suggestions are always welcome

@eric-conrad

Copy link
Copy Markdown
Contributor

Here's what I get when I run this version:

PS C:\Users\IEUser\Desktop\DeepBlueCLI-master> .\DeepBlue.ps1
Get-WinEvent -FilterHashtable @{Logname="Security";ID=4688,4720,4728,4732,4625}
-ErrorAction Stop
Get-WinEvent error: A positional parameter cannot be found that accepts argumen
t '4>'.

Exiting...

PS C:\Users\IEUser\Desktop\DeepBlueCLI-master>

@eric-conrad

Copy link
Copy Markdown
Contributor

I am testing on PS 2 on Win7 SP1, I'd like to maintain compatibility with that

@eric-conrad

Copy link
Copy Markdown
Contributor

FYI, Win 7 trial VMs are available here: https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/

@infosec-intern

Copy link
Copy Markdown
Author

Thanks for the feedback, I'll revisit it tonight and start testing against PS2

@infosec-intern

Copy link
Copy Markdown
Author

Tested some more with the Windows 7 VM from Microsoft. Looks like everything runs just as well as on Windows 10

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants