randomaccess3

#
# Programmatically detect the version of the Chrome web browser installed on the PC.
# Compatible with Windows, Mac, Linux.
# Written in Python.
# Uses native OS detection. Does not require Selenium nor the Chrome web driver.

# Forked version of https://gist.github.com/primaryobjects/d5346bf7a173dbded1a70375ff7461b4
# Modified to obtain the right version of the selenium driver
# Doesn't support getting the M1 Mac version

randomaccess3

# Usage: Merge-CSVFiles 
# Usage: Merge-CSVFiles -Path C:\files\to\merge\ -Filter "*.csv" -OutputFile C:\Temp
# Combination of https://declanbright.com/downloads/Combine-Files.ps1 and https://gallery.technet.microsoft.com/scriptcenter/CombineMerge-multiple-CSV-23a53e83

#function Merge-CSVFiles { 
#[cmdletbinding()] 

param( 
    [string]$Path = ".",
	[string]$Filter = "*.csv",

randomaccess3

name: Custom.Windows.WMI.VolumeShadowCopies

sources:
  - queries:
       - SELECT * FROM wmi(query="SELECT  DeviceObject, VolumeName, InstallDate FROM  Win32_ShadowCopy")

randomaccess3

name: Custom.Windows.NTFS.MFT.FilesMatchingKeywords
description: |
  This artifact scans the $MFT file on the host showing all files
  within the MFT and collects those that match the given list.

parameters:
  - name: MFTFilename
    default: "C:/$MFT"

  - name: Accessor