diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1 index 4903fb8..cd6db2a 100644 --- a/PowerHuntShares.psm1 +++ b/PowerHuntShares.psm1 @@ -4,7 +4,7 @@ #-------------------------------------- # Author: Scott Sutherland, 2024 NetSPI # License: 3-clause BSD -# Version: v1.191 +# Version: v1.192 # References: This script includes custom code and code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell. function Invoke-HuntSMBShares { @@ -2252,7 +2252,8 @@ function Invoke-HuntSMBShares $myComputerOs = $DomainComputers | where ComputerName -eq $myComputerName | select OperatingSystem -ExpandProperty OperatingSystem # Get share name guess - $myShareAppGuess = "None" + $myShareAppGuess = "Unknown" + $myShareAppDesc = "Unknown" $ListShareLocalPath = "" $ShareNameList | foreach { @@ -2267,8 +2268,9 @@ function Invoke-HuntSMBShares $ListShareApp = $_.Application if($ListShareName -eq $myShareName){ - # Set description - $myShareAppGuess = "The $ListShareName may be associated with $ListShareApp. $ListShareDesc $ShareShareJust" + # Set description & app guesses from static library + $myShareAppGuess = $ListShareApp + $myShareAppDesc = "The $ListShareName may be associated with $ListShareApp. $ListShareDesc $ShareShareJust" } } @@ -2281,6 +2283,7 @@ function Invoke-HuntSMBShares SharePath = $mySharePath ShareType = $myShareType ShareDescription = $myShareDescription + ShareDescriptionGuess = $myShareAppDesc ShareGuessStatic = $myShareAppGuess ShareGuessLLM = "" ShareGuessApp = "" @@ -3062,9 +3065,14 @@ function Invoke-HuntSMBShares "@ # Issue LLM query to summarize applications - $LLMCleanAppSummary = Invoke-LLMRequest -MaxTokens 4096 -SimpleOutput -apikey $ApiKey -endpoint $Endpoint -text "$LLMCleanPrompt2" + $LLMCleanAppSummary = Invoke-LLMRequest -MaxTokens 4096 -SimpleOutput -apikey $ApiKey -endpoint $Endpoint -text "$LLMCleanPrompt2" + + # LLM Warning + $LLMOutputWarning = "Note: Application fingerprints were generated using an experimental version of the LLM-based application fingerprinting function. As a result, some application classifications may not be accurate." + }else{ $LLMCleanAppSummary = "" + $LLMOutputWarning = "" } # ---------------------------------------------------------------------- @@ -6898,9 +6906,10 @@ input[type="checkbox"]:checked::before { affected - - - + + + +