James Forshaw
Latest commit 1110744 Jun 19, 2018
Permalink
..
Failed to load latest commit information.
Properties Updated version to 1.1.15. Jun 18, 2018
en-US Renamed project to NtObjectManager Oct 31, 2016
CommonAccessBaseCmdlet.cs Cleanup for string interpolation use. Feb 13, 2018
Formatters.ps1xml Added list formatter for a condition ACE. Mar 7, 2018
GenericObjectSecurity.cs Fix header comments. Nov 1, 2016
GetAccessibleDeviceCmdlet.cs Fixed formatted string. May 23, 2018
GetAccessibleFileCmdlet.cs Added simple named pipe access cmdlet. Jun 12, 2017
GetAccessibleHandle.cs Added Get-AccessibleHandle cmdlet. Oct 11, 2017
GetAccessibleKeyCmdlet.cs Cleanup for string interpolation use. Feb 13, 2018
GetAccessibleNamedPipeCmdlet.cs Added NtNamedPipeFile class to implement named pipe specific methods. Mar 14, 2018
GetAccessibleObjectCmdlet.cs Cleanup for string interpolation use. Feb 13, 2018
GetAccessibleProcessCmdlet.cs Cleanup for string interpolation use. Feb 13, 2018
GetAccessibleServiceCmdlet.cs Updated version. Nov 23, 2017
NtDirectoryCmdlets.cs Help file cleanups. Apr 2, 2018
NtDirectoryEntry.cs Refactoring to add non-throwing open/create calls. Jun 8, 2017
NtEventCmdlets.cs Fix missing XML closing element. Feb 6, 2018
NtFileCmdlets.cs Added transaction option to file cmdlets. Apr 4, 2018
NtHandleCmdlets.cs Added object types filter. May 22, 2017
NtJobCmdlets.cs Fix missing XML closing element. Feb 6, 2018
NtKeyCmdlets.cs Added basic transaction support to registry keys. Jun 19, 2018
NtMutantCmdlets.cs Fix missing XML closing element. Feb 6, 2018
NtObjectCmdlets.cs Help file cleanups. Apr 2, 2018
NtObjectManager.Core.csproj Updated to version 1.1.14 May 1, 2018
NtObjectManager.csproj Updated invoking script blocks to include the default first argument. Apr 2, 2018
NtObjectManager.psd1 Updated version to 1.1.15. Jun 18, 2018
NtObjectManager.psm1 Merge branch 'master' of github.com:google/sandbox-attacksurface-anal… Jun 12, 2018
NtObjectManagerProvider.cs Cleanup for string interpolation use. Feb 13, 2018
NtProcessCmdlets.cs Help file cleanups. Apr 2, 2018
NtSectionCmdlets.cs Cleaned up handling of paths and supported relative paths to the curr… Jan 16, 2018
NtSecurityCmdlets.cs Cleanup for string interpolation use. Feb 13, 2018
NtSemaphoreCmdlets.cs Fix missing XML closing element. Feb 6, 2018
NtSymbolicLinkCmdlet.cs Fix missing XML closing element. Feb 6, 2018
NtThreadCmdlets.cs Help file cleanups. Apr 2, 2018
NtTokenCmdlets.cs Fixed bug with handling of sandbox token. Mar 22, 2018
NtTypesCmdlets.cs Cleanup for string interpolation use. Feb 13, 2018
NtWaitCmdlets.cs Addded parameter set names. Jan 16, 2018
PSUtils.cs Work around an issue with current NuGet libraries for PSStandardLibra… Apr 3, 2018
Readme.txt Updated how Core version of module is handled. Jan 11, 2018
Win32Cmdlets.cs Added Add-DosDevice and Remove-DosDevice cmdlets. Mar 13, 2018
packages.config Updated document generation. Jan 16, 2018

Readme.txt

NtObjectManager - Managed .NET Powershell Module

(c) Google Inc. 2015, 2016, 2017
Developed by James Forshaw

You can load the using the Import-Module Cmdlet. You'll need to disable signing 
requirements however.

For example copy the module to %USERPROFILE%\Documents\WindowsPowerShell\Modules
then load the module with:

Import-Module NtObjectManager

You can now do things like listing the NT object manager namespace using:

Get-ChildItem NtObject:\

Also see help for various commons such as Get-NtProcess, Get-NtType or New-File.

Patches are welcome to add missing functions or fix bugs, see the CONTRIBUTING file 
in the root of the solution.

Building for PowerShell Core 6.0/.NET Core 2.0
-----------------------------------------

In order to build for PowerShell Core 6.0 you first need to build the .NET Framework
version of the module, or pull the latest version of NtObjectManager from the PowerShell
Gallery. Next build the .NET Core version of the module using the dotnet command line tool:

dotnet build NtObjectManager\NtObjectManager.Core.csproj -c Release

Now copy the files NtObjectManager.dll and NtApiDotNet.dll from the output folder to
the folder Core inside the original NtObjectManager module module directory.

Thanks to the people who were willing to test it and give feedback:
* Matt Graeber
* Lee Holmes
* Casey Smith
* Jared Atkinson