Skip to content

Commit 6734e0c

Browse files
committed
Putting named pipes here as it takes to long and utility is to low to be part of the 'default'
1 parent 8a494f0 commit 6734e0c

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

configs/verbose.yaml

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -197,4 +197,11 @@ commands:
197197
merge: csv
198198
id: ScriptBlockLogging
199199
tags: [access, powershell, builtin]
200-
dependencies: [utilities\ExtractScriptBlockLogging.ps1]
200+
dependencies: [utilities\ExtractScriptBlockLogging.ps1]
201+
# Extract Named Pipes, Owning Processes and Established Connections
202+
- command: powershell.exe C:\Windows\temp\ExtractNamedPipes.ps1 -OutputFile $FILENAME$
203+
file_name: $time$_NamedPipes.csv
204+
merge: csv
205+
id: NamedPipes
206+
tags: [access, pipes, builtin]
207+
dependencies: [utilities\ExtractNamedPipes.ps1]

0 commit comments

Comments
 (0)