diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1 index c9c26f2..fd10f7e 100644 --- a/PowerHuntShares.psm1 +++ b/PowerHuntShares.psm1 @@ -4,7 +4,7 @@ #-------------------------------------- # Author: Scott Sutherland, 2024 NetSPI # License: 3-clause BSD -# Version: v1.44 +# Version: v1.45 # References: This script includes custom code and code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell. function Invoke-HuntSMBShares { @@ -1616,6 +1616,9 @@ function Invoke-HuntSMBShares $ShareBar = $ShareNameBars.ShareBar $AclBar = $ShareNameBars.AclBar + # Share Description + $ShareDescriptionSample = $ExcessiveSharePrivs | where sharename -EQ "$ShareName" | where ShareDescription -NE "" | select ShareDescription -first 1 -expandproperty ShareDescription | foreach {"Sample Description:
$_"} + # First created $ShareFirstCreated = $ExcessiveSharePrivs | where sharename -EQ "$ShareName" | select creationdate | foreach{[datetime]$_.creationdate } | Sort-Object | select -First 1 | foreach {$_.tostring("MM.dd.yyyy HH:mm:ss")} @@ -1665,16 +1668,19 @@ function Invoke-HuntSMBShares $ShareCount - - $ShareName
- - First Created: $ShareFirstCreated
- Last Created: $ShareLastCreated
- Last Modified: $ShareLastModified
-
+ + +
+
+ First Created: $ShareFirstCreated
+ Last Created: $ShareLastCreated
+ Last Modified: $ShareLastModified

+ $ShareDescriptionSample +
+
- +
$ShareFolderGroupList @@ -1682,9 +1688,9 @@ function Invoke-HuntSMBShares
- +
-
+
$ShareOwnerList
@@ -3656,7 +3662,7 @@ This section contains a list of the most common SMB share names. In some cases, Share Count Share Name - Unique Folder Group Count + Unique Folder Groups Unique Owners Affected Computers Affected Shares