Create Content for SysInternals Autoruns

[jgstew]

autorunsc.exe -accepteula -a * -c -h -s -t -v -vt * >>"%TEMP%%COMPUTERNAME%-Autoruns4.csv"

Related:

• https://twitter.com/swiftonsecurity/status/946503303348785152?s=21
• https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns#autorunsc-usage
• Content for SigCheck: https://github.com/jgstew/bigfix-content/issues/9

[jgstew]

Completed:

• https://github.com/jgstew/bigfix-content/blob/master/fixlet/Run%20SysInternals%20Autorunsc%20-%20Windows.bes
• https://github.com/jgstew/bigfix-content/blob/master/analyses/SysInternals%20Autorunsc%20Results%20-%20Windows.bes

CSV to SQLite?

Seems like it is possible to import a CSV file into a SQLite table: https://www.sqlitetutorial.net/sqlite-import-csv/

This might make complex relevance queries against the results easier.