davehull / Kansa

A Powershell incident response framework
Apache License 2.0
1.55k stars 266 forks source link

Deserialize-KansaField.ps1 needs OSVersion Check and Bail #169

Open athegist opened 6 years ago

athegist commented 6 years ago

I was foolishly testing this out on Windows XP, I know, I know, and it failed in the decompression step. It should fail gracefully and return a message about why it failed. I think it may be a .net version issue. I don't think it's a PSVersion issue, but that's possible.

Given the error message, I suspect it's a .Net version issue. The error was [System.IO.Compression.GZipStream] doesn't contain a method named 'CopyTo'.

Looks like I have .Net version 3.5 installed.