Updated version.

Author: James Forshaw

NtApiDotNet/NtApiDotNet.Core.csproj

@@ -7,7 +7,7 @@
     <Authors>James Forshaw</Authors>
     <Company>Google Inc.</Company>
     <Product>NtApiDotNet</Product>
-    <FileVersion>1.1.6.0</FileVersion>
+    <FileVersion>1.1.7.0</FileVersion>
     <Copyright>Copyright © Google Inc. 2016, 2017</Copyright>
     <AssemblyVersion>1.0.0.0</AssemblyVersion>
     <PackageLicenseUrl>https://www.apache.org/licenses/LICENSE-2.0</PackageLicenseUrl>

NtApiDotNet/NtApiDotNet.nuspec

@@ -11,6 +11,15 @@
     <requireLicenseAcceptance>false</requireLicenseAcceptance>
     <description>A .NET class library to access native NT API system calls</description>
     <releaseNotes>
+1.1.7
+-----
+* Added projects to build NtObjectManager for PowerShell Core 6.0
+* Added additional techniques to open process tokens in access checking cmdlets.
+* Fixed issues with Add-NtKey and added Remove-NtKey cmdlets.
+* Minor fixes from fllombard
+* Added change notify key with asynchronous support
+* Added kernel LUID allocation
+
 1.1.6
 -----
 * Added support for child process policy and desktop app policy to Win32ProcessConfig.

NtApiDotNet/Properties/AssemblyInfo.cs

@@ -33,5 +33,5 @@
 // by using the '*' as shown below:
 // [assembly: AssemblyVersion("1.0.*")]
 [assembly: AssemblyVersion("1.0.0.0")]
-[assembly: AssemblyFileVersion("1.1.6.0")]
-[assembly: AssemblyInformationalVersion("1.1.6")]
+[assembly: AssemblyFileVersion("1.1.7.0")]
+[assembly: AssemblyInformationalVersion("1.1.7")]

NtApiDotNet/Readme.txt

@@ -24,3 +24,12 @@ And others I've no doubt forgotten.
 NOTE: It's still a work in progress and it's not designed to act as a documentation
 source for the entire NT API. There will be bits missing. Patches are welcome to 
 add missing functions or fix bugs, see the CONTRIBUTING file in the root of the solution.
+
+Building for PowerShell Core 6.0/.NET Core 2.0
+-----------------------------------------
+
+In order to build for PowerShell Core 6.0 use the command line:
+
+dotnet build NtApiDotNet\NtApiDotNet.Core.csproj -c Release
+
+Building for .NET Core does not currently work in Visual Studio 2017.

NtObjectManager/NtObjectManager.Core.csproj

@@ -7,7 +7,7 @@
     <Authors>James Forshaw</Authors>
     <Company>Google Inc.</Company>
     <Product>NtObjectManager</Product>
-    <FileVersion>1.1.6.0</FileVersion>
+    <FileVersion>1.1.7.0</FileVersion>
     <Copyright>Copyright © Google Inc. 2016, 2017</Copyright>
     <AssemblyVersion>1.0.0.0</AssemblyVersion>
     <PackageLicenseUrl>https://www.apache.org/licenses/LICENSE-2.0</PackageLicenseUrl>

NtObjectManager/NtObjectManager.psd1

@@ -18,7 +18,7 @@
 RootModule = 'NtObjectManager.psm1'
 
 # Version number of this module.
-ModuleVersion = '1.1.6'
+ModuleVersion = '1.1.7'
 
 # Supported PSEditions
 # CompatiblePSEditions = @()
@@ -132,7 +132,15 @@ PrivateData = @{
         # IconUri = ''
 
         # ReleaseNotes of this module
-        ReleaseNotes = '1.1.6
+        ReleaseNotes = '1.1.7
+-----
+* Added projects to build NtObjectManager for PowerShell Core 6.0
+* Added additional techniques to open process tokens in access checking cmdlets.
+* Fixed issues with Add-NtKey and added Remove-NtKey cmdlets.
+* Minor fixes from fllombard
+* Added change notify key with asynchronous support
+* Added kernel LUID allocation
+1.1.6
 -----
 * Added support for child process policy and desktop app policy to Win32ProcessConfig.
 * Added new mitigation options from Win10 1709.

NtObjectManager/Properties/AssemblyInfo.cs

@@ -33,5 +33,5 @@
 // by using the '*' as shown below:
 // [assembly: AssemblyVersion("1.0.*")]
 [assembly: AssemblyVersion("1.0.0.0")]
-[assembly: AssemblyFileVersion("1.1.6.0")]
-[assembly: AssemblyInformationalVersion("1.1.6")]
+[assembly: AssemblyFileVersion("1.1.7.0")]
+[assembly: AssemblyInformationalVersion("1.1.7")]

README.txt

@@ -16,10 +16,20 @@ NtApiDotNet: A basic managed library to access NT system calls and objects.
 NtObjectManager: A powershell module which uses NtApiDotNet to expose the NT object manager.
 ViewSecurityDescriptor: View the security descriptor from an SDDL string or an inherited object.
 
-The tools can be built with Visual Studio 2017
+The tools can be built with Visual Studio 2017. It's possible to also build NtApiDotNet and NtObjectManager
+with .NET Core 2.0 by building the specific project files.
 
 Release Notes:
 
+1.1.7
+-----
+* Added projects to build NtObjectManager for PowerShell Core 6.0
+* Added additional techniques to open process tokens in access checking cmdlets.
+* Fixed issues with Add-NtKey and added Remove-NtKey cmdlets.
+* Minor fixes from fllombard
+* Added change notify key with asynchronous support
+* Added kernel LUID allocation
+
 1.1.6
 -----
 * Added support for child process policy and desktop app policy to Win32ProcessConfig.