davehull / Kansa

A Powershell incident response framework
Apache License 2.0
1.56k stars 266 forks source link

Get-SigCheckRandomPath.ps1 #104

Closed davehull closed 9 years ago

davehull commented 9 years ago

A modified version of @z4ns4tsu's Get-SigCheck.ps1. This one can be used for sampling from common paths in situations where comprehensive coverage may be too time consuming. Sample a larger number of systems, then use Get-LogParserStack.ps1 to see if there's anything that warrants a closer look in a specific path or gives you reason to do a comprehensive pull using Get-Sigcheck.ps1.