Pinned

1. Parse UAC consent prompt events with... Parse UAC consent prompt events with information about the called process

   1

   $ScanResultsPath = ".\UacPrompts.csv"

   2

   $DateFormat = "yyyyMMddHHmmss"

   3

   4

   $isAdmin = ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")

   5

   if (-not $isAdmin) {

2. Helper functions to extract redirect... Helper functions to extract redirect chains and cert SAN

   1

   import re

   2

   import ssl

   3

   import socket

   4

   import requests

   5

   import urllib3