clong / DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices
MIT License
4.59k stars 979 forks source link

win10 join-domain.ps1 fails due to malicious content #862

Open rufflabs opened 1 year ago

rufflabs commented 1 year ago

Please verify that you are building from an updated Master branch before filing an issue.

Description of the issue:

During Win10 build the join-domain.ps1 script is blocked due to malicious content.

[20:14] Current domain is set to 'workgroup'. Time to join the domain!
[20:14] My hostname is WIN10

Stderr from the command:

powershell.exe : At C:\vagrant\scripts\join-domain.ps1:1 char:1
    + CategoryInfo          : NotSpecified: (At C:\vagrant\s...in.ps1:1 char:1:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
+ # Purpose: Joins a Windows host to the windomain.local domain which w ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This script contains malicious content and has been blocked by your antivirus software.
    + CategoryInfo          : ParserError: (:) [], ParseException
    + FullyQualifiedErrorId : ScriptContainedMaliciousContent

PS E:\DetectionLab\Vagrant>

Link to Gist Containing Build Logs:

I don't have any /DetectionLab/Vagrant/vagrant_up_$host.log logs.

GeorgePanagiotakopoulos commented 1 year ago

I have the same issue on an up-to date build I tried today.

I also got it while running "vagrant up" and in the end at the process of installing windows machine.