Skip to content

Commit

Permalink
fixed up some noisy rules, made Main() public so can load with ps ref…
Browse files Browse the repository at this point in the history
…lection
  • Loading branch information
l0ss committed Jul 2, 2021
1 parent ef39cea commit 7bde093
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 17 deletions.
32 changes: 17 additions & 15 deletions SnaffCore/Config/DefaultRules/FileNameRules.cs
Original file line number Diff line number Diff line change
Expand Up @@ -119,31 +119,16 @@ private void BuildFileNameRules()
Triage = Triage.Red,
WordList = new List<string>()
{
"\\.jks", // test file created
// rdp
"\\.rdp", // test file created
"\\.rdg", // test file created
// bitlocker recovery keys
"\\.bek", // test file created
// tpm backups
"\\.tpm", // test file created
"\\.fve", // test file created
// packet capture
"\\.pcap", // test file created
"\\.cap", // test file created
// misc key material
"\\.key", // test file created
"\\.keypair", // test file created
"\\.keychain", // test file created
// disk image
"\\.wim", // test file created
// virtual machines
"\\.ova", // test file created
"\\.ovf", // test file created
// db backups
"\\.mdf", // test file created
"\\.sdf", // test file created
"\\.sqldump", // test file created
"\\.dmp"
},
});
Expand All @@ -160,11 +145,28 @@ private void BuildFileNameRules()
Triage = Triage.Yellow,
WordList = new List<string>()
{
"\\.jks", // test file created
"\\.mdf", // test file created
"\\.sdf", // test file created
// disk image
"\\.wim", // test file created
// virtual machines
"\\.ova", // test file created
"\\.ovf", // test file created
// db backups
"\\.sqldump", // test file created
// bitlocker recovery keys
// "\\.bek", // test file created
// tpm backups
// "\\.tpm", // test file created
// "\\.fve", // test file created
/*
"\\.ps1",
"\\.bat",
"\\.sh",
"\\.pl",
"\\.rb"
*/
},
});

Expand Down
4 changes: 2 additions & 2 deletions Snaffler/Snaffler.cs
100644 → 100755
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@

namespace Snaffler
{
internal static class Snaffler
public static class Snaffler
{
private static void Main(string[] args)
public static void Main(string[] args)
{
SnaffleRunner runner = new SnaffleRunner();
runner.Run(args);
Expand Down

0 comments on commit 7bde093

Please sign in to comment.