Skip to content

Commit 65f6db3

Browse files
committed
Update Count-SBECmdTimestampColumns.ps1
1 parent 4bb889a commit 65f6db3

File tree

1 file changed

+42
-35
lines changed

1 file changed

+42
-35
lines changed

Count-SBECmdTimestampColumns.ps1

+42-35
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,8 @@ param
3232
[Parameter(Mandatory = $true,
3333
Position = 1,
3434
HelpMessage = 'Provide a file path for SBECmd CSV output')]
35-
[ValidatePattern('^.*_(UsrClass|NtUser)\.csv$')] # looks for *_UsrClass.csv or *_NtUser.csv. Can currently only ingest one file at a time
35+
[ValidatePattern('^.*_(UsrClass|NtUser)\.csv$')]
36+
# looks for *_UsrClass.csv or *_NtUser.csv. Can currently only ingest one file at a time
3637
[string]$Path
3738
)
3839

@@ -43,15 +44,19 @@ if (-not (Test-Path $Path))
4344
}
4445

4546
## Read CSV file
46-
$csvData = Import-Csv -Path $Path
47+
$csvData = Import-Csv -Path $Path # ingests the CSV provided by the user via $path
4748

4849
## Get counts for FirstInteracted column combined with AbsolutePath
49-
$FirstInteractedTotal = ($csvData | Where-Object { $_.FirstInteracted }).Count
50-
$FirstInteractedUnique = ($csvData | Where-Object { $_.FirstInteracted } | Select-Object -Property @{ Name = 'Combo'; Expression = { "$($_.AbsolutePath)|$($_.FirstInteracted)" } } | Select-Object -Unique Combo).Count
50+
$AbsolutePathTotal = ($csvData | Where-Object { $_.AbsolutePath }).Count # counts how many AbsolutePath cells have a value
51+
$AbsolutePathUnique = ($csvData | Where-Object { $_.AbsolutePath } | Select-Object -Property AbsolutePath -Unique).Count # counts how many unique AbsolutePath cells exist
52+
53+
## Get counts for FirstInteracted column combined with AbsolutePath
54+
$FirstInteractedTotal = ($csvData | Where-Object { $_.FirstInteracted }).Count # counts how many FirstInteracted cells have a value
55+
$FirstInteractedUnique = ($csvData | Where-Object { $_.FirstInteracted } | Select-Object -Property @{ Name = 'Combo'; Expression = { "$($_.AbsolutePath)|$($_.FirstInteracted)" } } | Select-Object -Unique Combo).Count # counts how many FirstInteracted cells have a value combined with the AbsolutePath value
5156

5257
## Get counts for LastInteracted column combined with AbsolutePath
53-
$LastInteractedTotal = ($csvData | Where-Object { $_.LastInteracted }).Count
54-
$LastInteractedUnique = ($csvData | Where-Object { $_.LastInteracted } | Select-Object -Property @{ Name = 'Combo'; Expression = { "$($_.AbsolutePath)|$($_.LastInteracted)" } } | Select-Object -Unique Combo).Count
58+
$LastInteractedTotal = ($csvData | Where-Object { $_.LastInteracted }).Count # counts how many LastInteracted cells have a value
59+
$LastInteractedUnique = ($csvData | Where-Object { $_.LastInteracted } | Select-Object -Property @{ Name = 'Combo'; Expression = { "$($_.AbsolutePath)|$($_.LastInteracted)" } } | Select-Object -Unique Combo).Count # counts how many LastInteracted cells have a value combined with the AbsolutePath value
5560

5661
## Get total unique values between both columns combined with AbsolutePath
5762
$uniqueValues = $csvData | ForEach-Object {
@@ -66,18 +71,20 @@ $totalValues = $FirstInteractedTotal + $LastInteractedTotal
6671

6772
## Output results
6873
Write-Host "This script combines either FirstInteracted or LastInteracted with the value of AbsolutePath for the purpose of calculating the total count within a respective CSV"
74+
Write-Host "Total count of values in AbsolutePath column: $AbsolutePathTotal"
75+
Write-Host "Number of unique values in AbsolutePath column: $AbsolutePathUnique"
6976
Write-Host "Total count of values in FirstInteracted column: $FirstInteractedTotal"
7077
Write-Host "Number of unique values in FirstInteracted column: $FirstInteractedUnique"
7178
Write-Host "Total count of values in LastInteracted column: $LastInteractedTotal"
7279
Write-Host "Number of unique values in LastInteracted column: $LastInteractedUnique"
73-
Write-Host "Total unique values between both columns: $totalUniqueValues"
74-
Write-Host "Total number of values in both columns: $totalValues"
80+
Write-Host "Total unique values between both AbsolutePath and FirstInteracted/LastInteracted columns: $totalUniqueValues"
81+
Write-Host "Total number of values between both AbsolutePath and FirstInteracted/LastInteracted columns: $totalValues"
7582

7683
# SIG # Begin signature block
7784
# MIIvngYJKoZIhvcNAQcCoIIvjzCCL4sCAQExDzANBglghkgBZQMEAgEFADB5Bgor
7885
# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
79-
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBX6Ojusu2H4BjA
80-
# 6LvpbVoLQPr0BGge9Br6RfDuM4s9J6CCKKMwggQyMIIDGqADAgECAgEBMA0GCSqG
86+
# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAJs5kyyXql8mtU
87+
# wzju6UlG6qtcpdzaleqyrAN8xChLAqCCKKMwggQyMIIDGqADAgECAgEBMA0GCSqG
8188
# SIb3DQEBBQUAMHsxCzAJBgNVBAYTAkdCMRswGQYDVQQIDBJHcmVhdGVyIE1hbmNo
8289
# ZXN0ZXIxEDAOBgNVBAcMB1NhbGZvcmQxGjAYBgNVBAoMEUNvbW9kbyBDQSBMaW1p
8390
# dGVkMSEwHwYDVQQDDBhBQUEgQ2VydGlmaWNhdGUgU2VydmljZXMwHhcNMDQwMTAx
@@ -297,36 +304,36 @@ Write-Host "Total number of values in both columns: $totalValues"
297304
# 9lAXRaV/0x/qHtrv6DGCBlEwggZNAgEBMGgwVDELMAkGA1UEBhMCR0IxGDAWBgNV
298305
# BAoTD1NlY3RpZ28gTGltaXRlZDErMCkGA1UEAxMiU2VjdGlnbyBQdWJsaWMgQ29k
299306
# ZSBTaWduaW5nIENBIFIzNgIQNZ6LJbr/UQt8TtHttsJpJDANBglghkgBZQMEAgEF
300-
# AKBMMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMC8GCSqGSIb3DQEJBDEiBCBx
301-
# dTQfKbokdiiX3lcHlpRwlZqr4U31Oqe7AseR4d30cTANBgkqhkiG9w0BAQEFAASC
302-
# AgBT/AR4IszPJIwu8Hm2JQpruq6+mDzVEvv2K9e1veaPYjQIgWueNUH+ZqnQgOzc
303-
# cgtqFTmUAqblcaS7xdLowAzRjUiWhFWIg3nAyv4fydRP7LrebCYXl7ByIXxL2KJe
304-
# y7Pee6eTZGvIGZBAkNxRFq+ZkqhoubnfqpNFYtOaEKT9lF3bXGHOkGfoyNwD3bWt
305-
# tLMA8YI7MzOBCw2+h7cyNFYQvEefiaX2bpvE8hsbrB+iMBHyhNhGY4FDRqKFGUgM
306-
# uDoXlYiK1Jtqx2X1vZdXS4gZgeu1vFBCWSmeFPdBR4MnlXtce1WWtXp0EsHxKdgu
307-
# oXX4Wfgw5SyV29XbIbRhhpojeJ6v/IgTo2klp5W+ljepRtfaA72Uu12foSkOubyY
308-
# dBhE9cK3sI2NsoxB2Nxq4tSCIIqeSy/1sMXZ8719Dl+fjQ5TNNWXVHNJg5DzyC6U
309-
# BI0BYWWzbyaozdGuWDe21jMrQkfT2kPPTr0u+qiy25qlvtpnxuMK/Q6YPDjIIncT
310-
# JGmdVcU95b3cLC5jrRlFkN8F7W/wM3/XEjjizC6DWB8/wrVwJ5OgfccyaUWa9vCz
311-
# WGffw48gV3zI/4TLGQB9v8ZmpHdNM+0bFmtniN6fteE4GIXI5c6y3a7u3KY0FsTi
312-
# IjwOZOB2/HJmZuQCvQpa6XRD3c9NjBredNlQuBb42Qx5pKGCA2wwggNoBgkqhkiG
307+
# AKBMMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMC8GCSqGSIb3DQEJBDEiBCCQ
308+
# 37SByzulOc9c00A2w3SNjytIj/oEQrTGe9TI7gzxOjANBgkqhkiG9w0BAQEFAASC
309+
# AgAU/Kau57hMDdyO/W+87AtfkxCGet9VMLN2oVJn/9i4YCUbDimG1x6q1a8uvDWZ
310+
# gBAfssW0aX9e72tgBX+bTPjobCjrGCbT/usCBA+Ggu04fcUxjpbeIez7SuUt1IjS
311+
# r6tZUtunMk6Rikw5YSltWWjJN7IM9aRpRR0RWYFzU1tyQ15ZqXqDlcEj/TOdFX64
312+
# CeW7lPLJOEGkgMylLkmjNMJVf1pMkoGIIqZp2WRmzXXE4fe0mFBpaRCV75M+KMHx
313+
# ZvjQf5cLLj1WfXhOQFc94CRZPKCcnE4v3+3w8DesnL8E6ofikNi++SJu/WfBcUDr
314+
# 21KF/NPUvf3cL1yrg2o5LopnsNtZmCJnL8yGRCdJum/LCaHnz1yjlCMGRAR4UZQ5
315+
# su8QJYFwurAuXeU1bY1zdszmRf/h/Osayp2jeKnZzDUoOgcMtwj3wNKIUyNpgmwC
316+
# xrtbeBDeOtdTrEi7vJlJ8AtC3gu82HnpJiAP7EpPJW9hT12g1H7enwHW2kfV/1db
317+
# 0fTD0hB63DumhgKbZbSNaKdTrlifTihCWHW+XUnN0Pb/wTyeVQdAtlulJ2ZjJCEl
318+
# qlqUzAIZSD3zW1Inb7IGp2OY+u+2PkLsogE5ZuHBVIfMi+RhwhUwf4icLJjV7hlF
319+
# nIdsQ/Nv+m7qxkLvXVx1QhUyL+afkNWKvDBeEBgGG1ksUqGCA2wwggNoBgkqhkiG
313320
# 9w0BCQYxggNZMIIDVQIBATBvMFsxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i
314321
# YWxTaWduIG52LXNhMTEwLwYDVQQDEyhHbG9iYWxTaWduIFRpbWVzdGFtcGluZyBD
315322
# QSAtIFNIQTM4NCAtIEc0AhABB2SbCLCn/n3WVKjy9Cn2MAsGCWCGSAFlAwQCAaCC
316323
# AT0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjQw
317-
# NzAxMTg1NzA5WjArBgkqhkiG9w0BCTQxHjAcMAsGCWCGSAFlAwQCAaENBgkqhkiG
318-
# 9w0BAQsFADAvBgkqhkiG9w0BCQQxIgQg9AQ18yrtuCF7UaK9FYvVKMA2XzibeA67
319-
# e1okt8yyOrowgaQGCyqGSIb3DQEJEAIMMYGUMIGRMIGOMIGLBBRE05OczRuIf4Z6
324+
# NzAxMTkwODA2WjArBgkqhkiG9w0BCTQxHjAcMAsGCWCGSAFlAwQCAaENBgkqhkiG
325+
# 9w0BAQsFADAvBgkqhkiG9w0BCQQxIgQgC5ySDNFuXoDBKxKV1lpCnW4R8shcBT0y
326+
# KFR3nztCeGAwgaQGCyqGSIb3DQEJEAIMMYGUMIGRMIGOMIGLBBRE05OczRuIf4Z6
320327
# zNqB7K8PZfzSWTBzMF+kXTBbMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFs
321328
# U2lnbiBudi1zYTExMC8GA1UEAxMoR2xvYmFsU2lnbiBUaW1lc3RhbXBpbmcgQ0Eg
322329
# LSBTSEEzODQgLSBHNAIQAQdkmwiwp/591lSo8vQp9jANBgkqhkiG9w0BAQsFAASC
323-
# AYAXT5O3IzQIOG2epZHv5OUT2qy9D7J/Q9/CjvYjslb8DK8vb/UC6GlyFze/el+a
324-
# cH0g0soRpzishaUc0BuZ5m611VwZHUZJXn5vX8ZmxveO2hvV3uiDaKjIyCfSAaq8
325-
# Lbfh/NxR4g1Dw1DOjEcNnLAjmarxUBk2R1Ei0s4E2+5uGXhz70R8EIWicL190STb
326-
# e7xXuPtm2nVjfgnE8CfsU838BEAGY6C6zOTss6jibVYRI5EkOJhLsYhc+cBjNmG6
327-
# otye7Qd+Hw4ZrbPPOk7JG+zDl1vNU29lXV17I0khfKJXHSgr2UyF/PnCN0k/ygMF
328-
# tmPH9F2la2epHN4qIs75G+kPcAw4iat2kU58JEsJ8Kigv6yzR4IXpFInTJNiyLPX
329-
# bx9CR/0lzsJPOd5KmhPLwsbjFJdnCeLD8Sq6Frpbf3HUgXTvqoItaeqWuFQs7xTh
330-
# CY77rkGS9jiyNgc5vaHPo2uxJrP4NT9fTWnO0r02i3wCWhc7AiNgsdtkBbIr6JK6
331-
# fbg=
330+
# AYAAp9eDPS/11RP/gzQ/M/TmPsluLzvlXLgHtZM8AuvBJb/XAfWYkE6NTfed0DZf
331+
# loA2LzADA14kpmXSpt7VaXFWvugNrwqRVkwtZHIl5m+S0NytjpF5fGMbr5MuMPaV
332+
# DyVdt8RlNdrOiyxo9s4rAMXn+ZrsED84LXGiaS9SdlTuAumZYLdsk6hsNSoph89Z
333+
# FcoZ7wNt0ZYx6bPXXjkfyIhfnWlG8/jkxCvyLNlImcdg3hbueTFLV36VpFybh+VY
334+
# ly/3Pz/RA6k1SQWXS/wA4qWUvuLevh72u66w0GR0v7dqAnOCW/ZXUu61lLzQev7p
335+
# pt/FtGUVSsyEXkWFOoV5/wiQxbBrJLoGJW6b+bMF/Q960aeQireWOPAH1FNumrCP
336+
# fdnMyAK2mrXHMS+E8vBiSR+2+5t51qFmv/o9QGWieYj6N1JpMT/+pA/X2VqtOAa8
337+
# 72PVoLgXcTpfpF6MFwJKLSRkziJE6HPFVMjqmFflR7uaJlntR3K72gA0EUVw2uZu
338+
# mVo=
332339
# SIG # End signature block

0 commit comments

Comments
 (0)