LiveConnect · Security & Health
SNARE
Persistence / autoruns audit with signature enrichment.
Sweeps Run/RunOnce keys, Startup folders, auto-start services, non-Microsoft scheduled tasks, WMI event subscriptions, IFEO debugger hooks, and Winlogon — enriching each entry with Authenticode signature status and target-on-disk existence. Read-only. The counterpart to TALON.
Quick Launch
Run SNARE
Paste into a Kaseya VSA LiveConnect PowerShell terminal. Downloads snare.ps1
from
CursedTechnocrat/TechnicianToolkit-LiveConnect and executes it with defaults.
Append parameters after & $f — see the script header for available switches.
Set-ExecutionPolicy Bypass -Scope Process -Force; $f="$env:TEMP\snare.ps1"; irm https://raw.githubusercontent.com/CursedTechnocrat/TechnicianToolkit-LiveConnect/main/snare.ps1 -OutFile $f; & $f