Inclusive language update

DeepBlue.ps1

@@ -40,8 +40,8 @@ function Main {
     $minlength=1000 # Minimum length of command line to alert
     # Load cmd match regexes from csv file, ignore comments
     $regexes = Get-Content ".\regexes.txt" | Select-String '^[^#]' | ConvertFrom-Csv
-    # Load cmd whitelist regexes from csv file, ignore comments
-    $whitelist = Get-Content ".\whitelist.txt" | Select-String '^[^#]' | ConvertFrom-Csv 
+    # Load cmd safelist regexes from csv file, ignore comments
+    $safelist = Get-Content ".\safelist.txt" | Select-String '^[^#]' | ConvertFrom-Csv 
     $logname=Check-Options $file $log
     #"Processing the " + $logname + " log..."
     $filter=Create-Filter $file $logname
@@ -671,10 +671,10 @@ function Check-Command(){
 
     $text=""
     $base64=""
-    # Check to see if command is whitelisted
-    foreach ($entry in $whitelist) {
+    # Check to see if command is safelisted
+    foreach ($entry in $safelist) {
         if ($commandline -Match $entry.regex) {
-            # Command is whitelisted, return nothing
+            # Command is safelisted, return nothing
             return
         }
     }

DeepWhite-checker.ps1

@@ -3,12 +3,12 @@
 # Plus a (free) VirusTotal API Key: https://www.virustotal.com/en/documentation/public-api/
 #
 $hashdirectory = ".\hashes"
-$whitelistfile=".\file-whitelist.csv"
-# Load the whitelist into a hash table
-if (Test-Path $whitelistfile){
-    $whitelist = Get-Content $whitelistfile | Select-String '^[^#]' | ConvertFrom-Csv
+$safelistfile=".\file-safelist.csv"
+# Load the safelist into a hash table
+if (Test-Path $safelistfile){
+    $safelist = Get-Content $safelistfile | Select-String '^[^#]' | ConvertFrom-Csv
     $hashes=@{}
-    foreach($entry in $whitelist){
+    foreach($entry in $safelist){
         $hashes[$entry.sha256]=$entry.path
     }
 }
@@ -17,7 +17,7 @@ Get-ChildItem $hashdirectory | Foreach-Object{
     if ($_.Name -Match '^[0-9A-F]{64}$'){ # SHA256 hashes are 64 character hex strings
         $SHA256=$_.Name
         if ($hashes.containsKey($SHA256)){
-           Rename-Item -Path "$hashdirectory\$SHA256" -NewName "$SHA256.whitelisted"
+           Rename-Item -Path "$hashdirectory\$SHA256" -NewName "$SHA256.safelisted"
         }
         Else{
             try{

README.md

@@ -20,7 +20,7 @@ Sample evtx files are in the .\evtx directory
 - [Output](#output)
 - [Logging setup](#logging-setup)
 - See the [DeepBlue.py Readme](READMEs/README-DeepBlue.py.md) for information on DeepBlue.py
-- See the [DeepWhite Readme](READMEs/README-DeepWhite.md) for information on DeepWhite (detective whitelisting using Sysmon event logs)
+- See the [DeepWhite Readme](READMEs/README-DeepWhite.md) for information on DeepWhite (detective safelisting using Sysmon event logs)
 
 ## Usage: