Skip to content

Measure-RvoObfuscation should have a 'SignerThumbprint' option for whitelisting #5

@LeeHolmes

Description

@LeeHolmes

Example implementation:

ipmo 'C:\Program Files (x86)\Entity Framework Tools\NuGet Packages\EntityFramework.5.0.0\tools\EntityFramework.psm1'


$a = Get-WinEvent -LogName Microsoft-Windows-PowerShell/Operational | ? ID -eq 4104
$b = $a | Get-RvoScriptBlock
$content = [System.Text.Encoding]::Unicode.GetBytes($b[0].ScriptBlock)
$c = Get-AuthenticodeSignature -Content $content -SourcePathOrExtension ".psm1"
$c.SignerCertificate.Thumbprint -in @("19F8F76F4655074509769C20349FFAECCECD217D")

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions