davehull / Kansa

A Powershell incident response framework

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Get-NetstatDistinctLocal24.ps1: missing DATADIR directive

iknowjason opened this issue · comments

Hello all,

I'm getting this WARNING in my Kansa output during analysis. I've been trying to play with where to put the DATADIR directive and how to populate it. The netstat collector is running and collecting data. Can anyone lend any insight please?

WARNING: Analysis script, .\Analysis\Net\Get-NetstatDistinctLocal24.ps1, missing # DATADIR directive, skipping analysis

Can you give the full command line issued when you ran Kansa? I don't tend to run the analysis scripts, but I'll see if I can lend a hand.

It's been awhile, but it looks to me like Get-NetstatDistinctLocal24.ps1 is missing the DATADIR directive. If you look at the other Net collectors, not all of them, but this one for instance,

, has a line that says where the data will be sitting for the Analysis script to run against. Add that line to Get-NetstatDistinctLocal24.ps1 and it should fix it.

PRs welcome. Cheers!

Sorry for the delayed response on this issue. The DATADIR directive insight above helped resolve this. Thank you. Command that I ran: .\kansa.ps1 -TargetList .\hosts.txt -Analysis

commented

Fixed via 6431e4e