Check-LSAPackageExtensions
1.0.1
on localhost or specified remote computers and checks the signature of each configured DLL.
It reports any DLLs that are not properly signed by a trusted publisher.
Also checks OSConfig\Security Packages, LSA Protection (RunAsPPL), and DLL metadata.
Uses WinRM
on localhost or specified remote computers and checks the signature of each configured DLL.
It reports any DLLs that are not properly signed by a trusted publisher.
Also checks OSConfig\Security Packages, LSA Protection (RunAsPPL), and DLL metadata.
Uses WinRM/PowerShell Remoting for remote connections. Ensure WinRM is configured on target machines.
Installation Options
Owners
Copyright
(c) 2024 Krishnaramanan
Package Details
Author(s)
- Krishnaramanan
Tags
LSA Security Windows PowerShell Audit Authentication Hardening
Functions
Test-HostReachable Test-WinRMAvailable Get-SignerInfo Get-DllMetadata Test-PackageAllowed Get-LegitimacyInfo Get-LSAProtectionStatus Invoke-LSACheck Get-SignerInfoLocal Get-DllMetadataLocal Invoke-LSACheckLocal Invoke-OSConfigCheck Add-LegitimacyInfo Show-InvestigationGuidance Main
Dependencies
This script has no dependencies.
FileList
- Check-LSAPackageExtensions.nuspec
- Check-LSAPackageExtensions.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 1.0.1 (current version) | 4 | 8/8/2026 |