TestimoX

API Reference

Class

SmbShareEvidenceRedactor

Edit on GitHub
Namespace ComputerX.Smb
Assembly ComputerX
Source ComputerX/Smb/SmbShareEvidenceRedactor.cs:28
Modifiers static

Creates redacted SMB share evidence packages and support bundles.

Inheritance

  • Object
  • SmbShareEvidenceRedactor

Methods

public static SmbShareEvidenceExportResult ExportSupportBundle(SmbShareEvidencePackage package, String outputPath, SmbShareEvidenceRedactionOptions options = null) #
ComputerX/Smb/SmbShareEvidenceRedactor.cs:160
Returns: SmbShareEvidenceExportResult

Redacts and exports a support bundle.

Parameters

package ComputerX.Smb.SmbShareEvidencePackage requiredposition: 0
Package to redact.
outputPath System.String requiredposition: 1
Output directory.
options ComputerX.Smb.SmbShareEvidenceRedactionOptions = null optionalposition: 2
Redaction options.

Returns

Export result for the redacted package.

public static SmbShareEvidenceRedactionResult Redact(SmbShareEvidencePackage package, SmbShareEvidenceRedactionOptions options = null) #
ComputerX/Smb/SmbShareEvidenceRedactor.cs:28
Returns: SmbShareEvidenceRedactionResult

Redacts paths, identities, SIDs, users, and optionally computer names while preserving row counts and stable joins.

Parameters

package ComputerX.Smb.SmbShareEvidencePackage requiredposition: 0
Package to redact.
options ComputerX.Smb.SmbShareEvidenceRedactionOptions = null optionalposition: 1
Redaction options.

Returns

Redacted package result.

Examples


SmbShareEvidenceRedactionResult redacted = SmbShareEvidenceRedactor.Redact(package);
SmbShareEvidenceExporter.Export(redacted.Package, @"C:\Evidence\support-redacted");