mandiant / mandiant/VM-Packages

Update how we obtain AntiVirus information in the host survey

Open
#113 0 comments 0 reactions 0 assignees View on GitHub
:bug: bug
Dominant language
PowerShell
Stars
246
Forks
98
Avg merge
9h 30m
Merged PRs (30d)
7

Description

### What's the problem?

Attempting to get AV information similar to https://www.powershellgallery.com/packages/CimSweep/0.6.0.0/Content/Auditing%5CAntiVirusInfo.ps1 sometimes works. Other times it doesn't.

### Steps to Reproduce

1. .\installl.ps1

### Environment

Windows 10 x64 1809

### Detected by test suite

I don't know

Contributor guide

Open the contributing guide

Research direction

Start by running .\installl.ps1 on Windows 10 x64 1809 and compare its antivirus detection behavior with CimSweep's AntiVirusInfo.ps1. Done means the host survey obtains antivirus information reliably across the intermittent cases described.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.