From fe090ac72927badcfcea9a330387ce08a7a61a62 Mon Sep 17 00:00:00 2001
From: Matt Kelly <mattkelly123@gmail.com>
Date: Tue, 17 Oct 2017 17:20:42 -0500
Subject: [PATCH] Fixes Reg-LoggedOn erroneous SID output

Fixes Reg-LoggedOn erroneous SID output type and formatting error
---
 Recon/PowerView.ps1 | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/Recon/PowerView.ps1 b/Recon/PowerView.ps1
index b94a4e4..549a806 100755
--- a/Recon/PowerView.ps1
+++ b/Recon/PowerView.ps1
@@ -15144,10 +15144,15 @@ actively logged on user, with the ComputerName added.
 
                 # sort out bogus sid's like _class
                 $Reg.GetSubKeyNames() | Where-Object { $_ -match 'S-1-5-21-[0-9]+-[0-9]+-[0-9]+-[0-9]+$' } | ForEach-Object {
-                    $UserName = ConvertFrom-SID -ObjectSID $_ -OutputType 'DomainSimple'
+                    $UserName = ConvertFrom-SID -ObjectSID $_
 
                     if ($UserName) {
-                        $UserName, $UserDomain = $UserName.Split('@')
+                        if ($UserName -Contains "@") {
+                            $UserName, $UserDomain = $UserName.Split('@')
+                        }
+                        else {
+                            $UserDomain, $UserName = $UserName.Split('\')
+                        }
                     }
                     else {
                         $UserName = $_