Clatent

Technology | Fitness | Food

PowerShell

Read-Only Friday October 28, 2022

by Leave a Comment

It’s Friday and the day for no major unplanned changes to your infrastructure.

How does your team share documentation between each other? Is it all in GitHub, Teams, Sharepoint, OneNote, Notion, ConnectWise, BookStack, etc? Or is it simple as word docs on a network share? Would you recommend the current way you are doing it?

If you use a combination, I’d love to hear the process of how you have it setup. If you prefer, you can message me, and I’ll do a summary of what everyone is using.

I know I have friends in all different size companies, curious to see how some of the solutions scale.

One-Liner Wednesday October 26, 2022

by Leave a Comment

One Liner Wednesday Cyber Security Edition

Want to see the top Malware that hits your 365 Exchange? Try this one liner out

Get-MailTrafficSummaryReport -Category TopMalware -StartDate 08-01-2022 -EndDate 10-25-2022 | Select-Object C1,C2 | out-gridview

This will give you the different types of malware Microsoft has found and how many times it found in since August 1. Then it will display it in a grid view that you can filter. I normally export to Excel/CSV to keep the data as it goes away after 90 days. Bigger organizations I’d recommend pushing it into a database for longer term analytics.

Check out Microsoft Docs and my 365 GitHub Repository for more ideas!

Microsoft Documentation:
Get-MailtrafficSummaryReport

365 Exchange Security Dasboard(Very early stages)
365 Exchange Security Dashboard

My Microsoft 365 GitHub Repository:
Powershell365

Module Monday October 24, 2022

by Leave a Comment

It’s Module Monday…

Although this module could be on Read-Only Friday, I wanted to show you that not all modules change your environment, and they can be extremely helpful getting information for you so you don’t have to create it or yourself. And with it being Cyber Security Month, why not have an easy way to find changes in your Active Directory.

With that said, today’s module is Jeff Hicks ADReportingTools, which I think the name is pretty obvious of what it does, but definitely check out the GitHub for all the reporting it can do. Here are a few of my favorites.

  • Get-ADDomainControllerHealth – this checks storage space, physical memory, % of security log in use, and critical services not running
  • Get-ADUserAudit – which will search the event logs on your domain controller for that specific user events
  • Get-ADGroupUser – which will display all users in that defined group and who any disabled users in red
  • Get-ADSiteSummary – shows a quick view of your sites and subnets
  • Show-DomainTree – this will show your domain in a tree view in your console
  • New-ADDomainReport – I really like this one, it shows you a nice html formatted report of your domain

Hope you take a look at it and if you see any features you’d like, let Jeff know.

PowerShell Gallery:

ADReportingTools/1.4.0

GitHub:
ADReportingTools

Read-Only Friday October 21, 2022

by Leave a Comment

It’s Friday, so you know what that means!

I like todays, because it’s another one of those it’s easy, but we either forget to check or believe it’s working but it may not be.

What is it? Event logging and dashboards. I’ll admit the dashboard part isn’t easy, but the event logging is. And I’m not just talking about your scripts(which you should be adding event logging to them when possible), I’m talking about any of your infrastructure that you manage. Even if you have alerting on, how do you know the alerting is actually working? Maybe your script or application you are using to go through the logs has an update but you don’t see it since you haven’t checked it in a month thinking it just works?

It’s always better to be proactive than reactive. Also while going through the logs you may find something else you want to start alerting for. Maybe you adding a new feature to your firewall or you added a print server and you want to setup alerting for those?

Hope you take out some time today and go through your logs, and if you’ve done that, do you have dashboards and/or alerting in place? If so, check those as well, and see if there is anyway you could improve it.

What scripts/modules/applications do you use to manage your event logs and/or create dashboards with?

One-Liner Wednesday October 19, 2022

by Leave a Comment 

New-TenantAllowBlockListItems -ListType Sender -Block -Entries emailaddress

Here is a super useful one liner that has come in handy more recently.

What this does is adds a user or domain to the tenant block list as it’s written below. If you need to add someone to the allow list, you can change -Block to -Allow. You can even change set a duration for both Blocking and Allowing.

Command:
New-TenantAllowBlockListItems

Example with Parameters:

Add-365Blocklist

Module Monday October 17, 2022

by Leave a Comment

It’s Module Monday!

I’ve recently found this module, and so glad I did as it’s a great module to add to the collection. Evergreen, helps you download installer packages for your apps, directly from the supported apps official site, all at once or one by one if you need to. How nice would it be if you knew the app you were deploying was the newest version every time you went to deploy it? Another great feature of it is you can download the exact version you need as well, so you don’t have the delete unwanted versions or having to make sure coworkers don’t deploy the wrong version.

Definitely check out this module and if you can add more applications the whole community would be grateful… it does already have a lot of apps!

Website:
Evergreen

PowerShell Gallery:
Evergreen