69 lines
2.5 KiB
Plaintext
69 lines
2.5 KiB
Plaintext
CHAT_OUTPUT_BEGIN
|
|
COMMAND_ID=SUPPORT-261007-PVE01-WINDOWS-64020-PROVENANCE-RCA-99761R1
|
|
STATUS=OK
|
|
RC=0
|
|
HOST=pve01
|
|
MODE=read-only
|
|
COMPONENT=pve01-windows-64020-provenance-rca
|
|
REFERENCE_REGISTER_CHECK=OK
|
|
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
|
ERROR_REGISTER_CHECK=OK
|
|
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
|
COMMAND_SHA256=7a6e2991d8017fbfcd66d68848112adf686ffe71c3eb2be613acb1bfad6cf290
|
|
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
|
EXECUTION_STARTED=true
|
|
CHANGE_DECLARED=false
|
|
RESULT_CONTRACT_VALID=true
|
|
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
|
RESULT_CONTRACT_ERROR=NONE
|
|
COMMAND_RC=0
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
SANITIZED=yes
|
|
SECRETS_INCLUDED=no
|
|
PRIVATE_ADDRESSES_INCLUDED=no
|
|
RAW_EVIDENCE_SHA256=efc400973905070c7be289a82aa6c9f6859584ff0a28f2f8fe00e089905e59b7
|
|
SANITIZED_OUTPUT_SHA256=efc400973905070c7be289a82aa6c9f6859584ff0a28f2f8fe00e089905e59b7
|
|
OUTPUT_BEGIN
|
|
PVE01_WINDOWS_64020_PROVENANCE_RCA=V1
|
|
MODE=read-only
|
|
NO_MUTATION=true
|
|
WINDOWS_LOCAL_INSPECT_RC=0
|
|
WINDOWS_EVIDENCE_PRESENT=true
|
|
HISTORICAL_ARTIFACT_FILE_COUNT=0
|
|
POWERSHELL_HISTORY_MATCH_COUNT=32
|
|
PUTTY_RELEVANT_SESSION_COUNT=0
|
|
PUTTY_RELEVANT_FORWARD_COUNT=0
|
|
REC|SIBLING_FILE|IDX=1|SCOPE=WATCHDOG_DIR|BASENAME=watchdog.pre99341.ps1|EXT=ps1|SIZE=3845
|
|
REC|SIBLING_FILE|IDX=2|SCOPE=WATCHDOG_DIR|BASENAME=watchdog.ps1|EXT=ps1|SIZE=5001
|
|
SIBLING_CANDIDATE_COUNT=2
|
|
REC|LOCAL_HASH|KIND=SIB|IDX=1|BASENAME=watchdog.pre99341.ps1|SHA256=69259a254159aabfef633e6565233dfcc91c30fb4355757d653a34699f2f193d
|
|
REC|LOCAL_HASH|KIND=SIB|IDX=2|BASENAME=watchdog.ps1|SHA256=7738599c1d229c105f1073f04b420063bd776f3444b3f6fcf7d09bd320cce0e3
|
|
PVE64020_LISTENER_COUNT=0
|
|
PVE64020_SSHD_OWNER_COUNT=0
|
|
SSHD_POLICY_GATEWAYPORTS=no
|
|
SSHD_POLICY_ALLOWTCPFORWARDING=yes
|
|
SSHD_POLICY_DISABLEFORWARDING=no
|
|
SSHD_POLICY_PERMITOPEN=any
|
|
SSHD_POLICY_PERMITLISTEN=any
|
|
SSH_HISTORY_EVENT_COUNT=0
|
|
SSH_HISTORY_RELEVANT_PID_COUNT=0
|
|
CLUSTER_QUORATE=true
|
|
NETBIRD_LAZY=false
|
|
NETBIRD_MANAGEMENT=true
|
|
NETBIRD_SIGNAL=true
|
|
NETBIRD_CONNECTED=5
|
|
DECISION=PASS_PVE01_WINDOWS_64020_PROVENANCE_RCA
|
|
NEXT_GATE=RESTORE_PROVEN_64020_ORIGIN
|
|
TASK_RESULT=PVE01_WINDOWS_64020_PROVENANCE_RCA
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261007-PVE01-WINDOWS-64020-PROVENANCE-RCA-99761R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
|
|
|
OUTPUT_END
|
|
CHAT_OUTPUT_END
|