Skip to content

Commit 93dc00e

Browse files
committed
Added some kb's to check for in Get-EternalBlueVuln function.
1 parent f4efd18 commit 93dc00e

File tree

3 files changed

+6
-331
lines changed

3 files changed

+6
-331
lines changed

Functions/Get-EternalBlueVulnerabilityStatistics.ps1

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,19 @@
11
<#PSScriptInfo
22
33
.Version
4-
1.2
4+
1.3
55
.Guid
66
038a1c05-b1da-48c9-893d-4084b99f831b
77
.Author
88
Thomas J. Malkewitz @dotps1
99
.Tags
10-
WannaCry, WannaCrypt, EternalBlue, SMB1, Malware
10+
WannaCry WannaCrypt EternalBlue SMB1 Malware
1111
.ProjectUri
1212
https://github.com/dotps1/PSFunctions
1313
.ExternalModuleDependencies
1414
NetTCPIP
1515
.ReleaseNotes
16-
Updated HotFixID Query to use Where-Object instead of .Where() to support older versions of PowerShell.
16+
Added KB articles: KB4019217, KB4019264.
1717
1818
#>
1919

@@ -151,6 +151,8 @@ begin {
151151
"KB4016635",
152152
"KB4019215",
153153
"KB4019216",
154+
"KB4019217",
155+
"KB4019264",
154156
"KB4019472"
155157
)
156158

@@ -160,7 +162,7 @@ begin {
160162
$osInformation = Get-CimInstance -CimSession $CimSession -ClassName Win32_OperatingSystem -Property Caption, LastBootUpTime, Version
161163

162164
# Hotfix Data
163-
Write-Progress -Activity "Gathering EternalBlue vulnerability information from '$nameValue'" -CurrentOperation "Retrieve operating hotfix id" -PercentComplete 40
165+
Write-Progress -Activity "Gathering EternalBlue vulnerability information from '$nameValue'" -CurrentOperation "Retrieve hotfix id" -PercentComplete 40
164166
$appliedHotFixID = (Get-CimInstance -CimSession $CimSession -ClassName Win32_QuickFixEngineering |
165167
Where-Object {
166168
$_.HotFixID -in $HotfixIDs

Functions/Test-WannaCryVulnerability.ps1

Lines changed: 0 additions & 296 deletions
This file was deleted.

README.md

Lines changed: 0 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -267,34 +267,3 @@ Credential
267267
PS C:\> Test-Credential -Credential $credential
268268
True
269269
```
270-
271-
---
272-
273-
### ~~Test-WannaCryVulnerability~~
274-
275-
_DEPRICATED, USE GET-ETERNALBULEVULNERABILITYSTATISTICS_
276-
277-
```
278-
PS C:\> Test-WannaCryVulnerability
279-
280-
PSComputerName : myrig
281-
OperatingSystemCaption : Microsoft Windows 7 Professional
282-
OperatingSystemVersion : 6.1.7601
283-
LastBootUpTime : 5/14/2017 3:38:38 PM
284-
Vulnerable : False
285-
AppliedHotFixID : KB4012212|KB4015546|KB4015549
286-
SMB1FeatureEnabled : False
287-
SMB1ProtocolEnabled : False
288-
289-
290-
PS C:\> Get-ADComputer -Identity workstation | Test-WannaCryVulnerability
291-
292-
PSComputerName : workstation
293-
OperatingSystemCaption : Microsoft Windows 7 Professional
294-
OperatingSystemVersion : 6.1.7601
295-
LastBootUpTime : 5/14/2017 3:38:38 PM
296-
Vulnerable : True
297-
AppliedHotFixID :
298-
SMB1FeatureEnabled : False
299-
SMB1ProtocolEnabled : True
300-
```

0 commit comments

Comments
 (0)