diff --git a/file_access_token/README.md b/file_access_token/README.md index bdd549d..617bc72 100644 --- a/file_access_token/README.md +++ b/file_access_token/README.md @@ -7,3 +7,14 @@ SMB example show cases how to use ProjFS to alert on share access from a remote Tarpit example shows how to create an approved Process list, and take actions, return random errors, delay loading of files etc... +Sample Invocation - Ensure `$(Get-Content .\csharp\test_file.csv -Raw)` is passed to parse the csv file. + +``` +Sample Invocation. +.\CanaryFS.ps1 -TaskName "CanaryFS" -TaskDescription "Create Fake Files" -ScriptPath "C:\users\Thinkst\data-script.ps1" -RootPath "C:\CanaryFs" + +Sample exe invocation +.\CanaryFS.exe C:\vfstest $(Get-Content .\csharp\test_file.csv -Raw) example.canarytokens.com true + +``` +