What exactly is the expected powershell output?

[cisagov]

What exactly is the expected powershell output?

[tchamness]

Hello,

I am running in to the same issue.

EDIT:
This was an issue with my local install of Office ProPlus. I ran an Office repair and the issue was resolved. Hope it works for everyone else.

[ttto65812]

We are having similar issues. Can someone from CISA gives us an expected output? What if nothing was found? What should the results look like?

[BrendanChambersBourgeois]

It tells you what it is it currently doing, The script will create a folder where you ran it called ExportDir and will contain all the data it found. Its up to you to find out if these actions have be done by people in your company or if they are malicious.

[Zharick407]

It tells you what it is it currently doing, The script will create a folder where you ran it called ExportDir and will contain all the data it found. Its up to you to find out if these actions have be done by people in your company or if they are malicious.

The script actually creates a folder in your Desktop, not in the folder you ran the script from.

[checkso]

It tells you what it is it currently doing, The script will create a folder where you ran it called ExportDir and will contain all the data it found. Its up to you to find out if these actions have be done by people in your company or if they are malicious.

The script actually creates a folder in your Desktop, not in the folder you ran the script from.

Oh man...this was really helpful. I was executing the script like a 3times and just no output. This should be added to the Readme.

[scurityn00b]

Roger that! I completely missed the folder creation but have found each of the directories and documents contained therein. Many thanks for that extra piece of information! It has proved to be invaluable in this procedure!

[genericdevname]

For how to interpret the results, the following alert will assist you: https://us-cert.cisa.gov/ncas/alerts/aa21-008a

The newly updated readme now states: The tool then outputs the data into multiple CSV files that are located in the user's default home directory in a folder called 'ExportDir' (ie: Desktop/ExportDir).