Powershell: Difference between revisions
(Created page with "#check authenticity (get-process wininit | select-object path).path | Get-AuthenticodeSignature PS C:\WINDOWS\system32> (get-process svchost | select-object path).path | ...") (change visibility) |
No edit summary (change visibility) |
||
| Line 1: | Line 1: | ||
#check authenticity | #check authenticity | ||
<syntaxhighlight lang="powershell"> | |||
(get-process wininit | select-object path).path | Get-AuthenticodeSignature | (get-process wininit | select-object path).path | Get-AuthenticodeSignature | ||
</syntaxhighlight> | |||
Revision as of 14:34, 21 November 2013
- check authenticity
(get-process wininit | select-object path).path | Get-AuthenticodeSignature
PS C:\WINDOWS\system32> (get-process svchost | select-object path).path | Get-AuthenticodeSignature
Directory: C:\WINDOWS\system32
SignerCertificate Status Path
------ ----
9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe 9C4F3BDB96A8F46DB59EDBB7A65CC090841236AA Valid svchost.exe
get-addomain