diff options
| author | Matt Graeber <mattgraeber@gmail.com> | 2013-07-04 13:01:47 -0400 |
|---|---|---|
| committer | Matt Graeber <mattgraeber@gmail.com> | 2013-07-04 13:01:47 -0400 |
| commit | 2a45cfbd1e0b4d300f69a2a571882c39740b76e3 (patch) | |
| tree | dabd6d3ff7ed38895e05ae63327ef907c6e8dac6 /ReverseEngineering/Get-NtSystemInformation.format.ps1xml | |
| parent | 9de59e9e3f3c3721f7c93e58b60ea2738590fa8e (diff) | |
| download | PowerSploit-2a45cfbd1e0b4d300f69a2a571882c39740b76e3.tar.gz PowerSploit-2a45cfbd1e0b4d300f69a2a571882c39740b76e3.zip | |
Get-NtSystemInformation can now query UMCI info
Get-NtSystemInformation now returns SystemCodeIntegrityInformation -
i.e. user-mode code integrity settings. This required reverse
engineering a dll that is only present on Windows 8 ARM devices.
Diffstat (limited to 'ReverseEngineering/Get-NtSystemInformation.format.ps1xml')
| -rw-r--r-- | ReverseEngineering/Get-NtSystemInformation.format.ps1xml | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/ReverseEngineering/Get-NtSystemInformation.format.ps1xml b/ReverseEngineering/Get-NtSystemInformation.format.ps1xml index 10d16d4..41b5280 100644 --- a/ReverseEngineering/Get-NtSystemInformation.format.ps1xml +++ b/ReverseEngineering/Get-NtSystemInformation.format.ps1xml @@ -415,5 +415,26 @@ </ListEntries> </ListControl> </View> + <View> + <Name>CodeIntegrityTypeView</Name> + <ViewSelectedBy> + <TypeName>_SYSTEM_CODEINTEGRITY_INFORMATION</TypeName> + </ViewSelectedBy> + <ListControl> + <ListEntries> + <ListEntry> + <ListItems> + <ListItem> + <PropertyName>CodeIntegrityOptions</PropertyName> + <FormatString>0x{0:X8}</FormatString> + </ListItem> + <ListItem> + <PropertyName>LockdownState</PropertyName> + </ListItem> + </ListItems> + </ListEntry> + </ListEntries> + </ListControl> + </View> </ViewDefinitions> </Configuration>
\ No newline at end of file |