From b67cfe5edf9a530e9401dfead7415c219afa7089 Mon Sep 17 00:00:00 2001 From: j4w Date: Fri, 20 Jan 2023 14:24:00 -0600 Subject: [PATCH] Update default threads --- PowerHuntShares.psm1 | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1 index 5803940..e62e6ed 100644 --- a/PowerHuntShares.psm1 +++ b/PowerHuntShares.psm1 @@ -17,13 +17,13 @@ function Invoke-HuntSMBShares .PARAMETER Output Directory File path where all csv and html report will be exported. .EXAMPLE - PS C:\temp\test> Invoke-HuntSMBShares -Threads 100 -OutputDirectory c:\temp\test -DomainController 10.1.1.1 -Username domain\user -Password password + PS C:\temp\test> Invoke-HuntSMBShares -Threads 20 -OutputDirectory c:\temp\test -DomainController 10.1.1.1 -ExportFindings -Username domain\user -Password password .EXAMPLE C:\temp\test> runas /netonly /user:domain\user PowerShell.exe PS C:\temp\test> Import-Module Invoke-HuntSMBShares.ps1 - PS C:\temp\test> Invoke-HuntSMBShares -Threads 100 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\ -DomainController 10.1.1.1 -Username domain\user -Password password + PS C:\temp\test> Invoke-HuntSMBShares -Threads 20 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\ -DomainController 10.1.1.1 -ExportFindings -Username domain\user -Password password .EXAMPLE - PS C:\temp\test> Invoke-HuntSMBShares -Threads 100 -OutputDirectory c:\temp\test + PS C:\temp\test> Invoke-HuntSMBShares -Threads 20 -ExportFindings -OutputDirectory c:\temp\test --------------------------------------------------------------- INVOKE-HUNTSMBSHARES @@ -149,7 +149,7 @@ function Invoke-HuntSMBShares [Parameter(Mandatory = $false, HelpMessage = 'Number of threads to process at once.')] - [int]$Threads = 100, + [int]$Threads = 20, [Parameter(Mandatory = $true, HelpMessage = 'Directory to output files to.')] @@ -4081,14 +4081,14 @@ The command examples below can be used to identify potentially malicious share p

From Domain System
-Invoke-HuntSMBShares -Threads 100 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\ +Invoke-HuntSMBShares -Threads 20 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\

From Non-Domain System
runas /netonly /user:domain\user PowerShell.exe
Import-Module Invoke-HuntSMBShares.ps1
-Invoke-HuntSMBShares -Threads 100 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\ -DomainController 10.1.1.1 -Username domain\user -Password password +Invoke-HuntSMBShares -Threads 20 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\ -DomainController 10.1.1.1 -Username domain\user -Password password