external help file | Module Name | online version | schema |
---|---|---|---|
PowerGRR-help.xml |
PowerGRR |
2.0.0 |
Get hunt results for a specific hunt.
Get-GRRHuntResult [[-HuntId] <String>] [[-Credential] <PSCredential>] [-ShowJSON] [<CommonParameters>]
Get hunt results for a specific hunt.
PS C:\> $res = Get-GRRHuntResult -HuntId AAAAAAAA -Credential $creds
PS C:\> $res.items.payload.stat_entry.pathspec.path | sort -u
PS C:\> $res.items.client_id | sort -u
Get hunt results based on a hunt id. Display all the unique file paths which
were found with a file finder hunt. Only display the unique GRR client id's.
then you can use Get-GRRComputerNameByClientId
to display only the computer
names.
GRR credentials.
Type: PSCredential
Parameter Sets: (All)
Aliases:
Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
Hunt id for which the results should be returned.
Type: String
Parameter Sets: (All)
Aliases:
Required: False
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
Return only plain JSON instead of converted JSON objects.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).