oceans2alaska
610a3bb447
- Add privacy projection (core/privacy.py), private report storage, bounded
process capture; omit identities, free text and unapproved paths
- Mask remote peer IPs: only loopback/host/wildcard stay numeric, others are
reduced to remote_scope private/public (schema + scoring updated)
- Map ss TCP states to canonical names; ASCII-only numeric fields; fix
"Microsoft Visual C++" product matching (Python and PowerShell)
- Merge 7fed3b9: -Diagnostic switch, serialization exit code 3, PS7 module
path, UI error detail; keep hardened task/certificate collectors
- Add audit docs, privacy docs and regression tests
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
14 lines
824 B
PowerShell
14 lines
824 B
PowerShell
function Get-SamsaraServices {
|
|
param($Result)
|
|
Invoke-SamsaraRead $Result 'Windows services' {
|
|
# Do not query PathName: it can include secret-bearing command arguments.
|
|
$index = 0
|
|
$Result.data = @(Get-CimInstance -ClassName Win32_Service -Property Name,State,StartMode,ProcessId -ErrorAction Stop | ForEach-Object {
|
|
$index++
|
|
[pscustomobject]@{ name = Get-SamsaraPublicName 'services' ([string]$_.Name) $index
|
|
state = [string]$_.State; startup = [string]$_.StartMode; account = 'Omitted by privacy policy'; pid = [int]$_.ProcessId }
|
|
})
|
|
}
|
|
$Result.limitations += 'All visible service states are inventoried, including running services. Executable command lines and credentials are not collected; service accounts do not prove consumers.'
|
|
}
|