global('$logpath');

$logpath = "/opt/CS/toolkit/logs/";

if (!-exists $logpath) {

mkdir($logpath);

}

on beacon_output

{

$bd = bdata($1);

local('$out','');

if ("(_ |_ _. ._ ._ | \ |_) /\ |_) | " isin $2)

{

$out = openf(">>" . "$logpath" . "SharpDPAPI_" . formatDate($3, 'yyyyMMMdd') . "_" . $bd['internal'] . "_" . $bd['computer'] . "_output.log");

println($out, "$2" . "\n");

closef($out);

}

if ("[*] Finished SharpDPAPI execution" isin $2)

{

$out = openf(">>" . "$logpath" . "SharpDPAPI_" . formatDate($3, 'yyyyMMMdd') . "_" . $bd['internal'] . "_" . $bd['computer'] . "_output.log");

println($out, "$2" . "\n");

closef($out);

}

}