DeepWhite-collector

[GlennGuillot]

Is there an issues getting this to work on Windows 10 (2004) with the latest version of Sysmon 12.0.3?

I get the error when running the powerShell script DeepWhite-collector:
Out-Host : A positional parameter cannot be found that accepts argument 'No SHA256 hash found. Ensure Sysmon is creatin
g SHA256 hashes'.
At DeepWhite-collector.ps1:36 char:9

•     Out-Host "No SHA256 hash found. Ensure Sysmon is creating SHA ...
  

•     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : InvalidArgument: (:) [Out-Host], ParameterBindingException
  • FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell.Commands.OutHostCommand

If I look in the Eventviewer, I can see the sha256 hashes for events 1 and 7 are present