intranet-readonly-db-share
Warn
Audited by Socket on Sep 11, 2026
1 alert found:
AnomalyAnomalyscripts/snapshot-share.ps1
LOWAnomalyLOW
scripts/snapshot-share.ps1
No evidence of malware or intentional supply-chain compromise is present. The script performs the documented snapshot mirroring and SMB-share management. Security review is warranted because /MIR can delete destination data, NTFS permissions are not configured despite the status message, and omitting -GrantAccount may create a share with broader access than intended. Existing share permissions are also not reduced. Review and explicitly set both NTFS and SMB ACLs before production use.
Confidence: 98%Severity: 58%
Audit Metadata