David Sass sassdawe

PowerShell has a problem with it's extra output streams. The actual content of the Warning, Verbose, Debug, Information, and even Error streams doesn't have the label text like "WARNING: " or "VERBOSE: " that we're used to seeing in the host. That label is actually added by the host (hopefully, in a culture-aware way). However, this means that when you attempt to redirect all of this output, for example by redirecting all output streams to stdout, with *>&1, you don't get labels on them at all, which is confusing, and can make the output difficult to comprehend.

Take for example a function that writes in a loop:

if ($i % 5 -eq 0) {
    Write-Output $i
} else {
    Write-Verbose $i
}

	filter ThrowStdOutErrors($messageFilter,[Parameter(ValueFromPipeline)]$obj) {
	if ($obj -is [Management.Automation.ErrorRecord]) {
	if ($obj -match $messageFilter) {
	throw $obj
	} else {
	Write-Error $obj
	return
	}
	}
	$obj

	using namespace System.Management.Automation
	using namespace Microsoft.PowerShell.Commands
	function Write-FunctionError {
	<#
	.SYNOPSIS
	Writes an error within the context of the containing CmdletBinding() function. Makes errr displays prettier
	#>
	param(
	[Parameter(Mandatory)][String]$Message,
	[ValidateNotNullOrEmpty()][ErrorCategory]$Category = 'WriteError',

	#requires -version 7
	#You can load this script with $(iwr https://tinyurl.com/TraceAICommand \| iex)
	using namespace Microsoft.ApplicationInsights
	using namespace Microsoft.ApplicationInsights.Extensibility
	using namespace Microsoft.ApplicationInsights.DataContracts
	using namespace System.Management.Automation
	using namespace System.Collections.Generic
	using namespace System.Net

	#Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/console

	using namespace System.Data
	function ConvertTo-DataTable {
	<#
	.SYNOPSIS
	Takes an array and converts it to a datatable, useful for sql or bulk transactions. All objects must be the same (or at least share properties with the first object)
	.EXAMPLE
	convertto-datatable @(
	[PSCustomObject]@{Name = 'Test'; Food = 'Burgers' },
	[PSCustomObject]@{Name = 'Test2'; Food = 'Fries' },
	[PSCustomObject]@{Name = 'Test3'; Food = 'Coke' },

	#requires -module Az.Resources
	#requires -module Az.ManagedServiceIdentity
	function Assert-SingleResult ([Object[]]$inputObject, [String]$Description) {
	<#
	.SYNOPSIS
	Helper function to ensure one and only one item.
	#>
	if ($inputObject.count -lt 1) {
	Write-Error [InvalidOperationException]"$Description was not found."
	return $false

	$WMI = @{
	Query = "SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA 'MSFT_MpPreference' AND TargetInstance.DisableRealtimeMonitoring=True"
	Action = {
	#$Global:Data = $Event
	Write-Host "Defender Configuration change - DisableRealtimeMonitoring:"$Event.SourceEventArgs.NewEvent.TargetInstance.DisableRealtimeMonitoring"(Old Value:"$Event.SourceEventArgs.NewEvent.PreviousInstance.DisableRealtimeMonitoring")"
	}
	Namespace = 'root\microsoft\windows\defender'
	SourceIdentifier = "Defender.DisableRealtimeMonitoring"
	}
	$Null = Register-WMIEvent @WMI

	$MyScript = [powershell]::Create()
	$null = $MyScript.AddScript( { Import-Module -Name Terminal-Icons } )
	$Runspace = [runspacefactory]::CreateRunspace()
	$MyScript.Runspace = $Runspace

	$null = Register-ObjectEvent -InputObject $MyScript -EventName InvocationStateChanged -Action {
	Import-Module -Name Terminal-Icons
	}

	class MagicNumber
	{
	hidden [int] $_value

	MagicNumber([int]$value)
	{
	$this._value = $value
	}

	# ECMA-335 I.10.3.2

	# Taken from : https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/WebcamRecorder.py
	function Start-WebcamRecorder
	{
	<#
	.SYNOPSIS
	This function utilizes the DirectX and DShowNET assemblies to record video from the host's webcam.
	Author: Chris Ross (@xorrior)
	License: BSD 3-Clause
	.DESCRIPTION
	This function will capture video output from the hosts webcamera. Note that if compression is available, there isn't