Skip to content

Commit

Permalink
Merge pull request #47 from SnaffCon/reflection
Browse files Browse the repository at this point in the history
fixed up some noisy rules, made Main() public so can load with ps ref…
  • Loading branch information
Sh3r4 authored Jul 2, 2021
2 parents ef39cea + 7bde093 commit 85af5cd
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 17 deletions.
32 changes: 17 additions & 15 deletions SnaffCore/Config/DefaultRules/FileNameRules.cs
Original file line number Diff line number Diff line change
Expand Up @@ -119,31 +119,16 @@ private void BuildFileNameRules()
Triage = Triage.Red,
WordList = new List<string>()
{
"\\.jks", // test file created
// rdp
"\\.rdp", // test file created
"\\.rdg", // test file created
// bitlocker recovery keys
"\\.bek", // test file created
// tpm backups
"\\.tpm", // test file created
"\\.fve", // test file created
// packet capture
"\\.pcap", // test file created
"\\.cap", // test file created
// misc key material
"\\.key", // test file created
"\\.keypair", // test file created
"\\.keychain", // test file created
// disk image
"\\.wim", // test file created
// virtual machines
"\\.ova", // test file created
"\\.ovf", // test file created
// db backups
"\\.mdf", // test file created
"\\.sdf", // test file created
"\\.sqldump", // test file created
"\\.dmp"
},
});
Expand All @@ -160,11 +145,28 @@ private void BuildFileNameRules()
Triage = Triage.Yellow,
WordList = new List<string>()
{
"\\.jks", // test file created
"\\.mdf", // test file created
"\\.sdf", // test file created
// disk image
"\\.wim", // test file created
// virtual machines
"\\.ova", // test file created
"\\.ovf", // test file created
// db backups
"\\.sqldump", // test file created
// bitlocker recovery keys
// "\\.bek", // test file created
// tpm backups
// "\\.tpm", // test file created
// "\\.fve", // test file created
/*
"\\.ps1",
"\\.bat",
"\\.sh",
"\\.pl",
"\\.rb"
*/
},
});

Expand Down
4 changes: 2 additions & 2 deletions Snaffler/Snaffler.cs
100644 → 100755
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@

namespace Snaffler
{
internal static class Snaffler
public static class Snaffler
{
private static void Main(string[] args)
public static void Main(string[] args)
{
SnaffleRunner runner = new SnaffleRunner();
runner.Run(args);
Expand Down

0 comments on commit 85af5cd

Please sign in to comment.