169 lines
6.6 KiB
Plaintext
169 lines
6.6 KiB
Plaintext
CHAT_OUTPUT_BEGIN
|
|
COMMAND_ID=SUPPORT-261007-WINDOWS-DACHA-STARTUP-SCRIPT-RCA-99752R1
|
|
STATUS=OK
|
|
RC=0
|
|
HOST=pve01
|
|
MODE=read-only
|
|
COMPONENT=windows-dacha-startup-script-rca
|
|
REFERENCE_REGISTER_CHECK=OK
|
|
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
|
ERROR_REGISTER_CHECK=OK
|
|
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
|
COMMAND_SHA256=d536d6b94315af4ae2824880fd7bd0d7b5d36e9dcf87b6546373e82a08687967
|
|
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
|
EXECUTION_STARTED=true
|
|
CHANGE_DECLARED=false
|
|
RESULT_CONTRACT_VALID=true
|
|
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
|
RESULT_CONTRACT_ERROR=NONE
|
|
COMMAND_RC=0
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
SANITIZED=yes
|
|
SECRETS_INCLUDED=no
|
|
PRIVATE_ADDRESSES_INCLUDED=no
|
|
RAW_EVIDENCE_SHA256=7e65c67d27f9681cb78b2341a92b23fd67fdb3eb77028a92a5e320345837fc9c
|
|
SANITIZED_OUTPUT_SHA256=7e65c67d27f9681cb78b2341a92b23fd67fdb3eb77028a92a5e320345837fc9c
|
|
OUTPUT_BEGIN
|
|
WINDOWS_DACHA_STARTUP_SCRIPT_RCA=V1
|
|
MODE=read-only
|
|
NO_MUTATION=true
|
|
WINDOWS_LOCAL_INSPECT_RC=0
|
|
WINDOWS_EVIDENCE_PRESENT=true
|
|
STARTUP_FOLDER_PRESENT=true
|
|
REC|SHORTCUT|IDX=1|TARGET_BASENAME=powershell.exe|ARG_LENGTH=171|HAS_FILE_SWITCH=true|HAS_COMMAND_SWITCH=false|HAS_ENCODED_COMMAND=false|HAS_NOPROFILE=true|HAS_WINDOWSTYLE=true|HAS_EXECUTIONPOLICY=true
|
|
STARTUP1_ARGS_HAS_64020=true
|
|
STARTUP1_ARGS_HAS_64022=true
|
|
STARTUP1_ARGS_HAS_PLINK=false
|
|
STARTUP1_ARGS_HAS_PAGEANT=false
|
|
STARTUP1_ARGS_HAS_SSH=false
|
|
STARTUP1_ARGS_HAS_START_PROCESS=false
|
|
STARTUP1_ARGS_HAS_STOP_PROCESS=false
|
|
STARTUP1_ARGS_HAS_GET_PROCESS=false
|
|
STARTUP1_ARGS_HAS_GET_NETTCP=false
|
|
STARTUP1_ARGS_HAS_NETSTAT=false
|
|
STARTUP1_ARGS_HAS_TEST_PATH=false
|
|
STARTUP1_ARGS_HAS_LOCK_TOKEN=false
|
|
STARTUP1_ARGS_HAS_PID_TOKEN=false
|
|
STARTUP1_ARGS_HAS_WATCHDOG=false
|
|
STARTUP1_ARGS_HAS_WHILE=false
|
|
STARTUP1_ARGS_HAS_START_SLEEP=false
|
|
STARTUP1_ARGS_HAS_EXIT=false
|
|
STARTUP1_ARGS_HAS_TCPCLIENT=false
|
|
STARTUP1_ARGS_HAS_TCPLISTENER=false
|
|
STARTUP1_ARGS_HAS_PROXY=false
|
|
STARTUP1_ARGS_HAS_TELEGRAM=false
|
|
STARTUP1_ARGS_HAS_IOBIT=false
|
|
STARTUP1_ARGS_HAS_CURL=false
|
|
STARTUP1_ARGS_HAS_INVOKE_WEBREQUEST=false
|
|
STARTUP1_PS1_CANDIDATE_COUNT=1
|
|
STARTUP1_PS1_RESOLVED=true
|
|
REC|SCRIPT|IDX=1|BASENAME=bridge.ps1|SIZE=5696
|
|
STARTUP1_SCRIPT_HAS_64020=true
|
|
STARTUP1_SCRIPT_HAS_64022=false
|
|
STARTUP1_SCRIPT_HAS_PLINK=false
|
|
STARTUP1_SCRIPT_HAS_PAGEANT=false
|
|
STARTUP1_SCRIPT_HAS_SSH=false
|
|
STARTUP1_SCRIPT_HAS_START_PROCESS=false
|
|
STARTUP1_SCRIPT_HAS_STOP_PROCESS=false
|
|
STARTUP1_SCRIPT_HAS_GET_PROCESS=false
|
|
STARTUP1_SCRIPT_HAS_GET_NETTCP=false
|
|
STARTUP1_SCRIPT_HAS_NETSTAT=false
|
|
STARTUP1_SCRIPT_HAS_TEST_PATH=false
|
|
STARTUP1_SCRIPT_HAS_LOCK_TOKEN=false
|
|
STARTUP1_SCRIPT_HAS_PID_TOKEN=false
|
|
STARTUP1_SCRIPT_HAS_WATCHDOG=false
|
|
STARTUP1_SCRIPT_HAS_WHILE=true
|
|
STARTUP1_SCRIPT_HAS_START_SLEEP=false
|
|
STARTUP1_SCRIPT_HAS_EXIT=false
|
|
STARTUP1_SCRIPT_HAS_TCPCLIENT=true
|
|
STARTUP1_SCRIPT_HAS_TCPLISTENER=true
|
|
STARTUP1_SCRIPT_HAS_PROXY=true
|
|
STARTUP1_SCRIPT_HAS_TELEGRAM=false
|
|
STARTUP1_SCRIPT_HAS_IOBIT=false
|
|
STARTUP1_SCRIPT_HAS_CURL=false
|
|
STARTUP1_SCRIPT_HAS_INVOKE_WEBREQUEST=false
|
|
REC|SCRIPT_LINE_SHAPE|IDX=1|LINE=1|HAS_64020=true|HAS_64022=false|HAS_PLINK=false|HAS_PAGEANT=false|HAS_START_PROCESS=false|HAS_STOP_PROCESS=false|HAS_GET_NETTCP=false|HAS_TEST_PATH=false|HAS_PID=false|HAS_LOCK=false|HAS_EXIT=false|HAS_R=false|HAS_L=false|HAS_D=false
|
|
STARTUP1_RELEVANT_LINE_COUNT=1
|
|
REC|SHORTCUT|IDX=2|TARGET_BASENAME=powershell.exe|ARG_LENGTH=171|HAS_FILE_SWITCH=true|HAS_COMMAND_SWITCH=false|HAS_ENCODED_COMMAND=false|HAS_NOPROFILE=true|HAS_WINDOWSTYLE=true|HAS_EXECUTIONPOLICY=true
|
|
STARTUP2_ARGS_HAS_64020=true
|
|
STARTUP2_ARGS_HAS_64022=true
|
|
STARTUP2_ARGS_HAS_PLINK=false
|
|
STARTUP2_ARGS_HAS_PAGEANT=false
|
|
STARTUP2_ARGS_HAS_SSH=false
|
|
STARTUP2_ARGS_HAS_START_PROCESS=false
|
|
STARTUP2_ARGS_HAS_STOP_PROCESS=false
|
|
STARTUP2_ARGS_HAS_GET_PROCESS=false
|
|
STARTUP2_ARGS_HAS_GET_NETTCP=false
|
|
STARTUP2_ARGS_HAS_NETSTAT=false
|
|
STARTUP2_ARGS_HAS_TEST_PATH=false
|
|
STARTUP2_ARGS_HAS_LOCK_TOKEN=false
|
|
STARTUP2_ARGS_HAS_PID_TOKEN=false
|
|
STARTUP2_ARGS_HAS_WATCHDOG=false
|
|
STARTUP2_ARGS_HAS_WHILE=false
|
|
STARTUP2_ARGS_HAS_START_SLEEP=false
|
|
STARTUP2_ARGS_HAS_EXIT=false
|
|
STARTUP2_ARGS_HAS_TCPCLIENT=false
|
|
STARTUP2_ARGS_HAS_TCPLISTENER=false
|
|
STARTUP2_ARGS_HAS_PROXY=false
|
|
STARTUP2_ARGS_HAS_TELEGRAM=false
|
|
STARTUP2_ARGS_HAS_IOBIT=false
|
|
STARTUP2_ARGS_HAS_CURL=false
|
|
STARTUP2_ARGS_HAS_INVOKE_WEBREQUEST=false
|
|
STARTUP2_PS1_CANDIDATE_COUNT=1
|
|
STARTUP2_PS1_RESOLVED=true
|
|
REC|SCRIPT|IDX=2|BASENAME=bridge.ps1|SIZE=5696
|
|
STARTUP2_SCRIPT_HAS_64020=true
|
|
STARTUP2_SCRIPT_HAS_64022=false
|
|
STARTUP2_SCRIPT_HAS_PLINK=false
|
|
STARTUP2_SCRIPT_HAS_PAGEANT=false
|
|
STARTUP2_SCRIPT_HAS_SSH=false
|
|
STARTUP2_SCRIPT_HAS_START_PROCESS=false
|
|
STARTUP2_SCRIPT_HAS_STOP_PROCESS=false
|
|
STARTUP2_SCRIPT_HAS_GET_PROCESS=false
|
|
STARTUP2_SCRIPT_HAS_GET_NETTCP=false
|
|
STARTUP2_SCRIPT_HAS_NETSTAT=false
|
|
STARTUP2_SCRIPT_HAS_TEST_PATH=false
|
|
STARTUP2_SCRIPT_HAS_LOCK_TOKEN=false
|
|
STARTUP2_SCRIPT_HAS_PID_TOKEN=false
|
|
STARTUP2_SCRIPT_HAS_WATCHDOG=false
|
|
STARTUP2_SCRIPT_HAS_WHILE=true
|
|
STARTUP2_SCRIPT_HAS_START_SLEEP=false
|
|
STARTUP2_SCRIPT_HAS_EXIT=false
|
|
STARTUP2_SCRIPT_HAS_TCPCLIENT=true
|
|
STARTUP2_SCRIPT_HAS_TCPLISTENER=true
|
|
STARTUP2_SCRIPT_HAS_PROXY=true
|
|
STARTUP2_SCRIPT_HAS_TELEGRAM=false
|
|
STARTUP2_SCRIPT_HAS_IOBIT=false
|
|
STARTUP2_SCRIPT_HAS_CURL=false
|
|
STARTUP2_SCRIPT_HAS_INVOKE_WEBREQUEST=false
|
|
REC|SCRIPT_LINE_SHAPE|IDX=2|LINE=1|HAS_64020=true|HAS_64022=false|HAS_PLINK=false|HAS_PAGEANT=false|HAS_START_PROCESS=false|HAS_STOP_PROCESS=false|HAS_GET_NETTCP=false|HAS_TEST_PATH=false|HAS_PID=false|HAS_LOCK=false|HAS_EXIT=false|HAS_R=false|HAS_L=false|HAS_D=false
|
|
STARTUP2_RELEVANT_LINE_COUNT=1
|
|
STARTUP_EXACT_MATCH_COUNT=2
|
|
REC|SCRIPT_HASH|IDX=1|BASENAME=bridge.ps1|SHA256=d6ed793d7cfd3ec4894ff766f1c20a5de80cf3be6615a27ae4dc0f836da4cf0e
|
|
REC|SCRIPT_HASH|IDX=2|BASENAME=bridge.ps1|SHA256=d6ed793d7cfd3ec4894ff766f1c20a5de80cf3be6615a27ae4dc0f836da4cf0e
|
|
CURRENT_PID64020_PRESENT=5964
|
|
CURRENT_PID64022_PRESENT=15780
|
|
REC|CURRENT_OWNER|PID=5964|IMAGE=plink.exe
|
|
REC|CURRENT_OWNER|PID=15780|IMAGE=powershell.exe
|
|
PVE64020_LISTENER_COUNT=0
|
|
PVE64020_SSHD_OWNER_COUNT=0
|
|
CLUSTER_QUORATE=true
|
|
NETBIRD_LAZY=false
|
|
NETBIRD_MANAGEMENT=true
|
|
NETBIRD_SIGNAL=true
|
|
NETBIRD_CONNECTED=5
|
|
DECISION=PASS_WINDOWS_DACHA_STARTUP_SCRIPT_RCA
|
|
NEXT_GATE=EXACT_LOCAL_WATCHDOG_REPAIR
|
|
TASK_RESULT=WINDOWS_DACHA_STARTUP_SCRIPT_RCA
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261007-WINDOWS-DACHA-STARTUP-SCRIPT-RCA-99752R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
|
|
|
OUTPUT_END
|
|
CHAT_OUTPUT_END
|