Blog

Post Image

Read More

February 5, 2020February 5, 2020 kimconnectkimconnect

PowerShell: Windows Defender Controlled Folder Access

# Default Setting of Windows Defender:PS C:\Windows\system32> get-mppreferenceAttackSurfaceReductionOnlyExclusions :AttackSurfaceReductionRules_Actions :AttackSurfaceReductionRules_Ids :CheckForSignaturesBeforeRunningScan : FalseCloudBlockLevel : 0CloudExtendedTimeout…
0 Comments
Post Image

Read More

February 4, 2020February 4, 2020 kimconnectkimconnect

PowerShell: An Exercise in Calculating Checksums

$out = new-object byte[] 1073741824; #1GB(new-object Random).NextBytes($out);[IO.File]::WriteAllBytes($dummyFile, $out);Measure-command{$hash=jacksum -a crc8 -x $dummyFile}write-host $hash# New ServerPS…
0 Comments
Post Image

Read More

February 3, 2020February 3, 2020 kimconnectkimconnect

PowerShell: Enable TLS 1.2 on legacy servers

# Enable TLS 1.2 on legacy servers function enableTls12{ $windowsVersionNumber=[System.Environment]::OSVersion.Version.Major; #$windowsName=(Get-CimInstance -ClassName Win32_OperatingSystem).Caption; #The term…
0 Comments
Post Image

Read More

January 22, 2020January 22, 2020 kimconnectkimconnect

PowerShell: Windows File Migration Tool Using VSS & FastCopy

Update: FastCopy doesn't properly update NTFS permissions of parent directories nor files if those items…
0 Comments
Post Image

Read More

January 20, 2020January 20, 2020 kimconnectkimconnect

PowerShell: Hobocopy Backup Software

# hobocopy-backup.ps1# Note: this is a quick snippet to demonstrate the use of this utility.#…
0 Comments
Post Image

Read More

January 16, 2020January 16, 2020 kimconnectkimconnect

PowerShell: Get CRC Signature of a File

2/10/20 Update: xxHash will beat both of these in term of speed. Hence, this blog…
0 Comments
Post Image

Read More

January 16, 2020January 16, 2020 kimconnectkimconnect

PowerShell: Get MD5 Hashing Signature of a File

# Get-MD5-Hash.ps1# Get-FileHash (PowerShell 4.0+) replacement for Windows 2008. Forward-compatible.function getMd5{ param( $file, $md5 =…
0 Comments
Post Image

Read More

January 16, 2020January 16, 2020 kimconnectkimconnect

PowerShell: Find Process IDs of a Locked File and Kill It

There's a newer iteration of this function here. $targetFile='C:\Users\kimconnect\Desktop\testfile.csv' function killPidLockedFile($filename){ if (!(Get-Command handle.exe -ErrorAction…
0 Comments
Post Image

Read More

January 16, 2020January 16, 2020 kimconnectkimconnect

PowerShell: Purge User Outlook Profile

# Purge-User-Outlook-Profile.ps1# Set folder path$folderToDelete="$env:localappdata\Microsoft\Outlook";function purgeFolder($path){ mkdir c:\temp -force -ea SilentlyContinue | out-null cd c:\temp…
0 Comments
Post Image

Read More

January 16, 2020January 16, 2020 kimconnectkimconnect

PowerShell: How To Make A System App Do Nothing

# How-To-Make-Existing-System-App-Do-Nothing.ps1# Provide variables$hive="REGISTRY::HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WORDPAD.EXE"$key="(default)"$value="C:\Windows\dummy.exe"$defaultValue="C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"# Dummy-File-Creator.ps1$dummyFile="C:\Windows\dummy.exe"$output = new-object byte[] 1; (new-object Random).NextBytes($output);[IO.File]::WriteAllBytes($dummyFile, $output);if…
0 Comments
Post Image

Read More

January 15, 2020January 15, 2020 kimconnectkimconnect

PowerShell: Perform Final Sync Between 2 Directories

Current Version # Final-Sync.ps1# This function performs CRC checks on each file at the source.#…
0 Comments
Post Image

Read More

January 14, 2020January 14, 2020 kimconnectkimconnect

Active Directory: How to Copy Account

Run: DSA.MSC > navigate to the container of the user to be copied (e.g. Test…
0 Comments
Post Image

Read More

January 14, 2020January 14, 2020 kimconnectkimconnect

Active Directory: How to Disable Account

RDP into a domain controller > Right-click the Windows icon on the bottom left corner…
0 Comments
Post Image

Read More

January 13, 2020January 13, 2020 kimconnectkimconnect

PowerShell: Change Process Priority Level

Most programs would launch with normal priories and trigger child processes with varying priority levels,…
0 Comments
Post Image

Read More

January 12, 2020January 12, 2020 kimconnectkimconnect

PowerShell: Check TCP Connections of Server by Port Numbers

# Check-TCP-Connections.ps1# This function will output progress onto the console as well as returning a…
0 Comments
Post Image

Read More

January 11, 2020January 11, 2020 kimconnectkimconnect

PowerShell: Stop Any Service on Windows!

Problem: some system protected services cannot be stopped. PS C:\Users\KingKong> stop-service msmpsvcStop-Service : Service 'Microsoft…
0 Comments
Post Image

Read More

January 10, 2020January 10, 2020 kimconnectkimconnect

PowerShell: Implementation of Anonymous Self Executing Function

JavaScript has this. It's a little known secret that PowerShell can do this as well.…
0 Comments
Post Image

Read More

January 9, 2020January 9, 2020 kimconnectkimconnect

PowerShell: Copy SMB Share Permissions from Legacy Sources

Scenario:Windows 2008 File Servers migration lacks a built-in function to clone Share Permissions - Get-SmbShareAccess…
0 Comments
Post Image

Read More

January 7, 2020January 7, 2020 kimconnectkimconnect

PowerShell: Install DotNet 3.5 – the Easy Way

$package="dotnet3.5"# Install Chocolateyif (!(Get-Command choco.exe -ErrorAction SilentlyContinue)) {Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))}#…
0 Comments
Post Image

Read More

January 6, 2020January 6, 2020 kimconnectkimconnect

PowerShell: Get Hyper-V Host Name from Inside Guest VM

$guestVMName="SOMENAME"function getHyperVHostname{ param([string]$guestVMName=$env:computername) $hive = [Microsoft.Win32.RegistryHive]::LocalMachine; $keyPath = 'SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters'; $value = 'HostName'; $reg =…
0 Comments