File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 33on :
44 # Trigger the workflow on push or pull requests, but only for the
55 # main branch
6- push :
7- branches :
8- - master
6+ # push:
7+ # branches:
8+ # - master
99 pull_request :
1010 branches :
1111 - master
4848 run : Get-WinEvent -ListLog Microsoft-Windows-Sysmon*
4949
5050 - name : Install some Choco Packages
51- run : choco install ninja adobereader googlechrome firefox jre8 notepadplusplus.install vlc python3 dotnetfx openssh winrar nodejs.install foxitreader autohotkey.portable putty.install skype ccleaner winlogbeat gimp
51+ run : choco install ninja adobereader googlechrome firefox python3
52+
53+ - name : Download User Sim
54+ run : Invoke-WebRequest https://github.com/humpalum/sim-user/releases/download/latest/5minuser.exe -OutFile .\5minuser.exe
55+
56+ - name : Run User Sim
57+ run : .\5minuser.exe
5258
5359 - name : Check Eventcount
5460 run : ' $EventCount = 0 ;Get-WinEvent -ListLog Microsoft-Windows-Sysmon* | where {$_.RecordCount -gt 0} | foreach{$_;$EventCount = $EventCount + $_.RecordCount}|Out-Null;"Eventcount: "+$EventCount; if ($EventCount -gt 10000){ Write-Output "Too many events"; $host.SetShouldExit(1)}'
You can’t perform that action at this time.
0 commit comments