Commit Graph
100 Commits
Author SHA1 Message Date
Scott Sutherland 6e233f7aba Update PowerHuntShares.psm1
Style updates.
2024-08-06 14:15:12 -05:00
Scott Sutherland f859c723ea Update Analyze-HuntSMBShares.ps1
Style updates.
2024-08-06 14:14:44 -05:00
Scott Sutherland cf721ec19d Update PowerHuntShares.psm1
bug fix.
2024-08-06 10:03:51 -05:00
Scott Sutherland 91df97630a Update PowerHuntShares.psm1
Small menu style change.
2024-08-06 09:52:18 -05:00
Scott Sutherland 154611bffe Update Analyze-HuntSMBShares.ps1
Small menu style update.
2024-08-06 09:51:28 -05:00
Scott Sutherland 01ffb2834c Update Analyze-HuntSMBShares.ps1
Small label update.
2024-08-05 17:01:44 -05:00
Scott Sutherland dbb30a2b6a Update PowerHuntShares.psm1
Small label update.
2024-08-05 17:01:05 -05:00
Scott Sutherland cc684d90a6 Update PowerHuntShares.psm1
Added a few charts.
2024-08-05 16:47:59 -05:00
Scott Sutherland 4b75d04be4 Update Analyze-HuntSMBShares.ps1
Added a few charts.
2024-08-05 16:47:13 -05:00
Scott Sutherland b1ee82b751 Update PowerHuntShares.psm1 2024-08-02 10:53:22 -05:00
Scott Sutherland 110dfc6766 Update PowerHuntShares.psm1 2024-08-02 10:27:27 -05:00
Scott Sutherland 12a64d9c95 Update PowerHuntShares.psm1
Added export and clear buttons to folder groups page.
Added more secrets and system images types to the interesting files categories.
2024-08-01 17:14:10 -05:00
Scott Sutherland 6583604702 Update Analyze-HuntSMBShares.ps1
Added export and clear buttons to folder groups page.
Added more secrets and system images types to the interesting files categories.
2024-08-01 17:13:25 -05:00
Scott Sutherland 96e60f890d Update PowerHuntShares.psm1
Added export to share names page.
Updated a few table styles.
2024-07-31 11:39:00 -05:00
Scott Sutherland bd7c8fe3b6 Update Analyze-HuntSMBShares.ps1
Added exports on share names page.
Updated a few table styles.
2024-07-31 11:38:03 -05:00
Scott Sutherland e21a0e9a76 Update PowerHuntShares.psm1
DASHBOARD PAGE
- Add exposure summary that includes new charts that summarize acl risk levels and file exposures by category.

EXPORTS
- New file generated to that includes flags for risk levels, data exposure, read, write, and exploitability. Example: domain.com-Shares-Inventory-Excessive-Privileges-New.csv 

CONSOLE OUTPUT 
- Replaced top 5 with top $SampleSum

MENU
- Insight section - rename "Top Share Names" to "Share Names"
- Insight section - rename "Top Folder Groups" to "Folder Groups"
- Insight section - rename "Top Share Owners" to "Share Owners"
- Insight section - rename "Group Stats" to "Group ACL Summary"
- Modified titles of associate data insights pages to remove "Data Insights"
  - Group ACL Summary
  - Share Names (Top $SampleSum)
  - Affected Subnets
  - Share Owners (Top $SampleSum)
  - Folder Groups (Top $SampleSum)
- Move group stats below owners
2024-07-30 13:31:10 -05:00
Scott Sutherland 85a3e21457 Update Analyze-HuntSMBShares.ps1 2024-07-30 13:28:51 -05:00
Scott Sutherland 7f869f3146 Update Analyze-HuntSMBShares.ps1
Added clear button to interesting files page.
2024-07-24 10:26:01 -05:00
Scott Sutherland b470c2a3b6 Update PowerHuntShares.psm1
Added clear filter button to interesting files page.
2024-07-24 10:24:28 -05:00
Scott Sutherland b47607e6cd Update Analyze-HuntSMBShares.ps1
Keeping in sync with the primary script.
2024-07-24 08:50:01 -05:00
Scott Sutherland efc57d864c Update PowerHuntShares.psm1
Feature: interesting files page, added the ability to click the category on the bar chart to filter the interesting files table rows for that category.
2024-07-24 08:49:19 -05:00
Scott Sutherland 4a6be74349 Create Analyze-HuntSMBShares.ps1 2024-07-23 17:17:57 -05:00
Scott Sutherland 624e697bfe Added support for the nova file format.
Added support for the nova file format.
2024-07-23 17:14:02 -05:00
Scott Sutherland 4ddc28df72 Added interesting files page
DEFAULT PARAMETER 
- Changed default share name sample reporting to 200 (That's 100% for most companies)

TOP FOLDER GROUPS PAGE 
- Added pagination.
- Added unique share name count column. 
- Added column sorting. 
- Added search. 

TOP SHARE NAME PAGE
- Added pagination.

INTERESTING FILES PAGE 
0. All interesting files are now saved to the [domain]-Shares-Interesting-Files.csv file when PowerHuntShares is run.
1. Added interesting files page. 
2. Added view total interesting files display.
3. Added bar chart showing interesting file category summary. Note: apexcharts.js requires internet access, but may ship with PowerHuntShares in future versions.
3. Added ability to view uncpaths for interesting files via expandable div.
4. Added ability to filter results with search.
5. Added ability to export uncpaths associated with filtered results to a csv file. 
6. Added ability to import a file that allows users to define their work interesting file keywords and categories. 
   Example: Invoke-HuntSMBShares -OutputDirectory 'c:\temp' -DomainController 'dc1.domain.com' -Username 'domain.com\user' -Password 'YourPassword' -FileKeywordsPath "C:\temp\interesting-files-template.csv" 
7. Added template file for interesting file definition: https://raw.githubusercontent.com/NetSPI/PowerHuntShares/main/interesting-files-template.csv
2024-07-23 16:28:13 -05:00
Scott Sutherland 1aa6ffcd23 Add files via upload 2024-07-23 13:51:55 -05:00
Scott Sutherland f810b06fd0 Update PowerHuntShares.psm1
small update to secrets word list.
2024-07-19 10:52:22 -05:00
Scott Sutherland 42188422fd Update PowerHuntShares.psm1
minor style update.
2024-07-19 10:00:17 -05:00
Scott Sutherland a0f3e54cde Update PowerHuntShares.psm1
small dashboard updates.
2024-07-19 09:45:10 -05:00
Scott Sutherland fe222e03a7 Update PowerHuntShares.psm1
Small filter updates.
2024-07-18 17:03:19 -05:00
Scott Sutherland 22e85a833a Update PowerHuntShares.psm1
Small bug fix.
2024-07-18 15:30:09 -05:00
Scott Sutherland ffe0f8b548 Update PowerHuntShares.psm1
Small sort function update.
2024-07-18 15:12:08 -05:00
Scott Sutherland 76a82cc9a8 Update PowerHuntShares.psm1
Added pagination to top share name page.
2024-07-18 14:34:03 -05:00
Scott Sutherland f3520f9439 Update PowerHuntShares.psm1
Added sorting on folder group table.
2024-07-18 09:17:00 -05:00
Scott Sutherland 0830a520f8 Update PowerHuntShares.psm1
Add unique share name count to folder group summary page.
2024-07-18 08:53:32 -05:00
Scott Sutherland 933d69a67f Update PowerHuntShares.psm1
Update folder group labels.
2024-07-18 08:01:19 -05:00
Scott Sutherland 43cc8786c0 Updated share name summary page
added search
added quick filters
added risk score
added similarity score
added common files
added interesting files
2024-07-16 11:51:19 -05:00
Scott Sutherland 100d5052f0 Update README.md 2024-06-28 11:20:57 -05:00
Scott Sutherland a57c0da01c Update README.md 2024-06-13 09:29:29 -05:00
Scott Sutherland ef14246193 Update PowerHuntShares.psm1
More weight fixes.
2024-06-13 08:56:17 -05:00
Scott Sutherland d7d9715b06 Update PowerHuntShares.psm1
Adjusting/tuning similarity weights.
2024-06-13 08:47:50 -05:00
Scott Sutherland da05f12082 Update PowerHuntShares.psm1
Updated similarity weights to include filename distribution across filegroups associated with each share name.
2024-06-12 16:54:52 -05:00
Scott Sutherland 03e50db10b Update PowerHuntShares.psm1
Updated the share similarity probability distribution weights.
2024-06-12 15:52:21 -05:00
Scott Sutherland 3d46053a6d Update PowerHuntShares.psm1
Style sheet updates to match branding.
2024-06-12 09:39:39 -05:00
Scott Sutherland 037facfa42 Update PowerHuntShares.psm1
Fixed filelistgroup count bug on share name summary page.
Removed timeline column from share name summary page. (for now)
2024-06-11 12:02:07 -05:00
Scott Sutherland 8cd5ed2e80 Update PowerHuntShares.psm1
Fix bad variable name in peak date range calculator.
2024-06-11 09:59:13 -05:00
Scott Sutherland a62b9d4022 Update PowerHuntShares.psm1
Fixed majority check bug on share name page.
2024-06-11 09:36:24 -05:00
Scott Sutherland 8c2cc8f676 Update PowerHuntShares.psm1
Add line break after each owner name on share name summary page.
2024-06-11 09:26:36 -05:00
Scott Sutherland 3589fa809b Update README.md
readme updates
2024-06-05 17:37:49 -05:00
Scott Sutherland af6a9f9b1d Update PowerHuntShares.psm1
Added dynamic identification of peak share creation date ranges for top share names on top share name page. (alpha)
2024-06-05 17:34:40 -05:00
Scott Sutherland b58f3d65ce Update PowerHuntShares.psm1
Small format update.
2024-06-05 08:16:39 -05:00
Scott Sutherland 5b83dc73b9 Update PowerHuntShares.psm1
Added javascript based search to names page to allowing filtering of share names.
2024-06-04 16:40:48 -05:00
Scott Sutherland 866b51da28 Update PowerHuntShares.psm1
Added share name drill down to folder group page.
2024-06-04 15:00:15 -05:00
Scott Sutherland f8301b2588 Update PowerHuntShares.psm1
updated top names page
2024-06-04 11:49:50 -05:00
Scott Sutherland 55f1ef9534 Update PowerHuntShares.psm1
Added similarity score to top share names page. It shows how similar the shares that share the same name are based on folder group, owner, create date, and last mod dates.
2024-06-03 16:37:07 -05:00
Scott Sutherland 15db1f9d1b Update PowerHuntShares.psm1
Format changes.
2024-06-03 10:06:00 -05:00
Scott Sutherland 8cb937bad7 Update PowerHuntShares.psm1
Made timeline context and share description collapsible on top share names page.
2024-06-03 09:50:41 -05:00
Scott Sutherland 76946cac82 Update PowerHuntShares.psm1 2024-06-03 09:29:52 -05:00
Scott Sutherland ad5cb43a65 Update PowerHuntShares.psm1
Added timeline context to top share names page.
2024-06-03 09:12:08 -05:00
Scott Sutherland 2f5481d657 Update PowerHuntShares.psm1
Made folder groups list collapsible under the unique folder group count column on the top sharenames page.
2024-06-02 11:13:59 -05:00
Scott Sutherland 0eef2d6c53 Update PowerHuntShares.psm1
Added unique folder group count column to "top share name" page.
2024-06-02 08:40:04 -05:00
Scott Sutherland 2bf0a514eb Update PowerHuntShares.psm1
Updated "Most Common Share Folder Groups" to include collapsible file list.
2024-06-02 08:29:29 -05:00
Scott Sutherland cf7527e96c Update PowerHuntShares.psm1
Fixed file directory group count and added file listing to "Top Share Names" page.
2024-06-01 19:28:08 -05:00
Scott Sutherland ab55640dc0 Update README.md
Removed completed item.
2024-06-01 13:40:39 -05:00
Scott Sutherland 16543b558d Update PowerHuntShares.psm1
Added folder group counts (directory list hashes)  to the "Top Share Names" summary dashboard to better understand the distribution of unique folder lists.
2024-06-01 13:39:59 -05:00
Scott Sutherland ca978b6579 Update README.md 2024-05-31 14:21:04 -05:00
Scott Sutherland 529b19ff93 Update README.md 2024-05-31 14:18:38 -05:00
Scott Sutherland d7c12a356d Update PowerHuntShares.psm1
update logo
2024-05-20 14:18:36 -05:00
Scott Sutherland e7ae7c3b63 Update PowerHuntShares.psm1
Added noping option.
Lack of ping response no longer stops execution of port scan.
2024-05-20 09:46:26 -05:00
Scott Sutherland 0de4a04ffb Update README.md 2024-04-05 13:31:43 -05:00
Scott Sutherland 339d6eb121 Update README.md 2024-04-05 13:31:02 -05:00
Scott Sutherland 9746d1b7a4 Update README.md 2024-04-05 13:30:19 -05:00
Scott Sutherland 4b73fe6f86 Update PowerHuntShares.psm1 2023-04-05 08:53:19 -05:00
Scott Sutherland 0abf1183d8 Merge pull request #12 from Shr1mpOG/main
Update PowerHuntShares.psm1
2023-04-05 08:40:40 -05:00
Scott Sutherland 6154587b1d Merge pull request #11 from j4w/patch-1
Update default threads
2023-04-05 08:39:30 -05:00
Scott Sutherland fe596de276 Merge pull request #5 from Joel-Costamagna/patch-1
corrected typo
2023-04-05 08:38:44 -05:00
Scott Sutherland 37b9c0b9b7 Update README.md 2023-01-03 16:54:36 -06:00
Scott Sutherland 902369734c Update README.md 2022-12-20 13:14:50 -06:00
Scott Sutherland bffa1363b5 Update PowerHuntShares.psm1
Added netlogon and sysvol to the excessive privileges exclusion list.
2022-12-12 15:29:35 -06:00
Scott Sutherland 87df2f1c4c Update README.md 2022-11-18 10:03:41 -06:00
Scott Sutherland 92fde2b4f7 Update outdated URL 2022-09-21 14:00:40 -05:00
Scott Sutherland 1111dd1cdb Updated hardcoded path 2022-09-21 13:59:44 -05:00
Scott Sutherland 0ef3f690c8 Update README.md 2022-09-21 12:41:14 -05:00
Scott Sutherland 60b2e71714 Update README.md 2022-09-15 10:15:23 -05:00
Scott Sutherland 72ef74b512 Update README.md 2022-09-15 10:12:33 -05:00
Scott Sutherland 9c944c659d Update README.md 2022-08-24 07:39:42 -05:00
Scott Sutherland f9c274a0bd Update README.md 2022-07-22 13:57:11 -05:00
Scott Sutherland 270d481175 Update README.md 2022-07-18 17:18:23 -05:00
Scott Sutherland 02fe398465 Update README.md 2022-07-18 17:14:49 -05:00
Scott Sutherland aca9142b10 Update README.md 2022-06-09 15:41:32 -05:00
Scott Sutherland 1f48f57bdb Update README.md 2022-05-25 08:39:30 -05:00
Scott Sutherland 1a452362ed Update README.md 2022-05-25 08:35:23 -05:00
Scott Sutherland e28c90bd4b Update README.md 2022-05-24 21:19:21 -05:00
Scott Sutherland 8446663598 Update PowerHuntShares.psm1 2022-05-09 16:21:30 -05:00
Scott Sutherland 9f68bf82a9 Update README.md 2022-05-09 16:09:16 -05:00
Scott Sutherland b53477c5a7 Update README.md 2022-05-09 15:56:41 -05:00
Scott Sutherland 547c5ccb08 Update PowerHuntShares.psm1 2022-05-09 14:06:55 -05:00
Scott Sutherland 6f221bf305 Update README.md 2022-05-06 07:56:24 -05:00
Scott Sutherland 86af2a107b Update README.md 2022-04-30 12:11:33 -05:00
Scott Sutherland 18b7c045c9 Update README.md 2022-04-20 17:43:56 -05:00
Scott Sutherland 0239adc605 Add files via upload 2022-04-20 17:43:43 -05:00