Because it does at least skip the ones with no changes.
Why get convoluted with Powershell to do the same?
Not every system may have Robocopy.
it became part of theOS with Windows Vista. So anything running Windows Vista or Higher will have robocopy as a part of the Operating system (as everyone should be using higher than vista at this point.. I mean.. windows 7 is obsolete now.. sooo..)
Windows 10 1709 is obsolete too, so really anything not with a support mechanism shouldn't be used. But @JaredBusch might be getting paid stupid amounts of money to support Windows XP / Server 2000
@Pete-S That is going to be complete subjective based on the type of spam that might come in.
I follow what you're saying but I'm kind of stuck between having something functional or not (due to this).
Well, you need to decide what you are allowing and not. For instance you have already decided to just use the subject line and not any of the other parts of the email, for instance author.
You need to run the string through regex or something like that to remove characters you are not allowing. It might take more than one string operation to sanitize. I think you can escape any special character you want to allow with backtick `.
Another option would be to allow the user to enter the entire KQL query themselves.
Also if you get an error when trying to apply the search you put out an error "Invalid search input!" and go back to prompt the user for input again. That would be one way so solve problems.
That I have. I didn't do a practice session for every objective because I ran out of time before the test. But taking the time to talk through most of them was a good way for me to determine if I needed to go back and review details.