681

Downloads

138

Downloads of 1.0.6

2017-05-24

Last published

NtObjectManager

1.0.6

This module adds a provider and cmdlets to access the NT object manager namespace.

Inspect

PS> Save-Module -Name NtObjectManager -Path <path> -RequiredVersion 1.0.6

Install

PS> Install-Module -Name NtObjectManager -RequiredVersion 1.0.6

Deploy

See Documentation for more details.

Release Notes

1.0.6
-----
* Added cmdlet to filter a Token object.
* Cleanups to various components to make them easier to use from PS
1.0.5
-----
* Added additional Known SIDs
* Unified the variant Get-NtToken* cmdlets into one.
* Added additional token cmdlets such as Logon and Clipboard.
* Added initial support for IO Completion Ports
* Added object creation time property
* Added support to set a process device map
* Added top level CanSynchronize property to NtObject
* Bugs fixes from Rustam Agametov
1.0.4
-----
* Support getting and setting file EA buffe
* Added cmdlet to get NTSTATUS code information
* Support to toggle UIAccess and Virtualization flags on tokens
* Added asynchronous support for file operations using Task APIs
* Added support for virtual memory functions
* Added cmdlet to create named pipes and mailslots.
* Added support for specifying SD as SDDL directly to cmdlets.
* Added thread descriptions for Anniversary edition and above.
1.0.3
-----
* Fixed small bug in handling of IO_STATUS_BLOCK which could result in memory corruption.
* Added support to list directory entries for a file directory.
* Added support to do basic read and writes to a file.
1.0.2
-----
* Added support to disable dynamic code policy on a process.
* Added cmdlets for reparse points.
* Fixes for EA buffer.
* Added service SIDs.
* Added support for removing token privileges.
* Fixed token security attribute parsing.
1.0.1
-----
* Fixed bug in Get-NtThread with -ProcessId
* Added support for FilterScript for Get-NtThread
* Added support for querying thread dynamic code opt-out policy
* Added support for RFG mitigation
1.0.0
-----
Initial release:
* NT Object Manager drive provider
* Cmdlets to directory work with Directorys, Files, Symbolic Links, Events, Semaphores, Processes, Threads, Tokens etc.

Owners

Authors

James Forshaw

Copyright

(c) 2016, 2017 Google Inc. All rights reserved.

FileList

Show

Tags

Cmdlets

Functions

DSC Resources

This module has no DSC resources.

Workflows

This module has no workflows.

Role Capabilities

This module has no role capabilities.

Dependencies

This module has no dependencies.

Minimum PowerShell version

3.0

Version History

Version Downloads Last updated
NtObjectManager 1.1.1 91 Wednesday, August 30 2017
NtObjectManager 1.1.0 2 Wednesday, August 30 2017
NtObjectManager 1.0.9 65 Saturday, August 19 2017
NtObjectManager 1.0.8 35 Monday, August 07 2017
NtObjectManager 1.0.7 85 Wednesday, June 14 2017
NtObjectManager 1.0.6 (this version) 138 Wednesday, May 24 2017
NtObjectManager 1.0.5 8 Wednesday, May 24 2017
NtObjectManager 1.0.4 18 Wednesday, May 17 2017
NtObjectManager 1.0.3 68 Thursday, February 23 2017
NtObjectManager 1.0.2 27 Wednesday, February 08 2017
NtObjectManager 1.0.1 72 Thursday, November 03 2016
NtObjectManager 1.0 49 Tuesday, November 01 2016