Skip to content

Latest commit

 

History

History
61 lines (36 loc) · 1.57 KB

README.md

File metadata and controls

61 lines (36 loc) · 1.57 KB
Raw

Startup Item Checker

Description

This PowerShell script checks and gathers information about startup items on a Windows system. It retrieves details such as file hashes and additional file information for executable files configured to run at system startup.

Usage

Split-CommandLine Function

The Split-CommandLine function splits a command line into individual arguments.

Split-CommandLine -CommandLine "command arg1 arg2"

Get-ItemInfo Function

The Get-ItemInfo function provides information about a given item, including file hashes and additional details.

Get-ItemInfo -Item "C:\Path\To\File.exe"

Get-StartupFolderItem Function

The Get-StartupFolderItem function checks and gathers information about executable files in a specified startup folder.

Get-StartupFolderItem -FolderPath "C:\Path\To\Startup\Folder"

Main Script

The main script checks and retrieves information about startup commands, executable files in the startup folders, and more.

# Example: Run the main script
.\StartupItemChecker.ps1

Prerequisites

  • PowerShell version 5.1 or later.

Notes

  • This script checks both all-users and single-user startup folders for executable files.
  • File hashes and additional information are gathered for each executable file found.

Disclaimer

This script is provided as-is, without any warranty. Use it responsibly and at your own risk.

Author

clr34m3r

License

This project is licensed under the Apache License - see the LICENSE file for details.