(4 votes, average: 4.00 out of 5)
Loading...Capa física Adaptadores de red Información sobre los adaptadores de red Información avanzada sobre los adaptadores de red Habilitar un […]
(10 votes, average: 4.70 out of 5)Loading...Procesos Información sobre procesos Tabla de procesos Estados de un proceso Crear procesos Parar procesos El procesador Hilos Comunicación entre […]
(1 votes, average: 5.00 out of 5)Loading...1 2 3 4 | #Detectar regla sobre programas permtidos Get-NetFirewallRule | Where-Object {$_.name -match '.exe'} | select * #Detectar regla sobre un programa permitido Get-NetFirewallRule | Where-Object {$_.DisplayName -match 'MySQL'} | select * |
(2 votes, average: 5.00 out of 5)Loading...Introducción Confidencialidad
1 2 3 4 5 | #Habilitar BitLocker Enable-BitLocker -MountPoint "f:" -RecoveryPasswordProtector -UsedSpaceOnly -Verbose #Deshabilitar BitLocker Disable-BitLocker -MountPoint "f:" |
Integridad
1 2 3 4 5 6 7 | #Calcular hash para un archivo Get-FileHash D:\power\fichero.txt -Algorithm MD5 Get-FileHash D:\power\fichero.txt -Algorithm SHA1 Get-FileHash D:\power\fichero.txt -Algorithm SHA256 Get-FileHash D:\power\fichero.txt -Algorithm SHA384 Get-FileHash D:\power\fichero.txt -Algorithm SHA512 Get-FileHash D:\power\fichero.txt -Algorithm RIPEMD160 |
Seguridad física Analizar el hardware de los equipos de la empresa
1 2 3 4 5 6 7 8 9 10 11 | $credenciales=Get-Credential 1..254 | %{ (Get-WmiObject Win32_AutochkSetting -ComputerName ('192.168.1.'+$_) -Credential $credenciales).SettingID (Get-WmiObject Win32_BaseBoard -ComputerName ('192.168.1.'+$_) -Credential $credenciales).Manufacturer (Get-WmiObject Win32_BIOS -ComputerName ('192.168.1.'+$_) -Credential $credenciales).Version (Get-WmiObject Win32_Bus -ComputerName ('192.168.1.'+$_) -Credential $credenciales).DeviceID Get-WmiObject Win32_Processor -ComputerName ('192.168.1.'+$_) -Credential $credenciales Get-WmiObject Win32_SystemEnclosure -ComputerName ('192.168.1.'+$_) -Credential $credenciales Get-WmiObject Win32_Battery -ComputerName ('192.168.1.'+$_) -Credential $credenciales Get-WmiObject Win32_Printer -ComputerName ('192.168.1.'+$_) -Credential $credenciales } |
Ver dispositivos conectados […]
(1 votes, average: 5.00 out of 5)Loading...1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 | #Información sobre procesos Get-Process | Select-Object Name,Path,Company,CPU,Product,TotalProcessorTime,StartTime #Información sobre hilos (Get-Process chrome | Select-Object Threads).Threads Get-Process | select -expand Threads #Información sobre conexiones #https://www.jesusninoc.com/2015/11/13/cmdlets-for-tcpip-model-layers/ Get-NetAdapterHardwareInfo Get-NetAdapter -Physical Get-NetNeighbor Get-NetAdapterStatistics Get-NetAdapter | Select-Object Name,MacAddress Get-NetAdapter | Select-Object Name,MacAddress Get-WmiObject -Class Win32_NetworkAdapterConfiguration | Select-Object Description,MACAddress Get-NetAdapter | Select-Object Name,MacAddress Get-WmiObject -Class Win32_NetworkAdapterConfiguration | Select-Object Description,MACAddress ((Get-NetAdapterBinding).DisplayName) -match 'Protocolo de Internet' (Get-NetIPInterface) | Select-Object InterfaceAlias,AddressFamily Get-NetIPv4Protocol Get-NetIPv6Protocol Get-NetRoute Get-NetNat Get-NetNatExternalAddress Get-NetNatGlobal Get-NetNatSession Get-NetNatStaticMapping Get-NetNatTransitionConfiguration Get-NetNatTransitionMonitoring Get-NetFirewallAddressFilter Get-NetFirewallApplicationFilter Get-NetFirewallInterfaceFilter Get-NetFirewallInterfaceTypeFilter Get-NetFirewallPortFilter Get-NetFirewallProfile Get-NetFirewallRule Get-NetFirewallSecurityFilter Get-NetFirewallServiceFilter Get-NetFirewallSetting Get-NetTCPSetting Get-NetTCPConnection Get-NetTCPConnection | Select-Object LocalPort,Remoteport Get-NetUDPSetting Get-NetUDPEndpoint (Get-NetUDPEndpoint).LocalPort Get-DnsClient Get-DnsClientCache Get-DnsClientGlobalSetting Get-DnsClientNrptGlobal Get-DnsClientNrptPolicy Get-DnsClientNrptRule Get-DnsClientServerAddress #Fecha y hora del sistema Get-Date #Última hora de arranque del sistema Get-CimInstance -ClassName win32_operatingsystem | select csname, lastbootuptime Get-WmiObject win32_operatingsystem | select csname, @{LABEL='LastBootUpTime';EXPRESSION={$_.ConverttoDateTime($_.lastbootuptime)}} #DLL Get-Process | select -expand MainModule Get-Process | select -expand Modules |
(2 votes, average: 4.50 out of 5)Loading...Layer 1. Network Interface Layer The Network Interface layer (also called the Network Access layer) sends TCP/IP packets on […]
(1 votes, average: 5.00 out of 5)Loading...Gestión del hardware Gestión de archivos Agregar/Eliminar software Actualizar Gestión de procesos Programación de tareas Gestión de usuarios Gestión del […]
(No Ratings Yet)Loading...1 | Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\*' | % {Write-host $_.DisplayName : $_.Start} |
(No Ratings Yet)Loading...1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 | #Important #Necessary: Microsoft Online Services Sign-In Assistant for IT Professionals RTW #The Microsoft Online Services Sign-In Assistant provides end user sign-in capabilities to Microsoft Online Services, such as Office 365. #Link: https://www.microsoft.com/en-gb/download/details.aspx?id=28177 #If you have problems with MSOnline: MSOnline can't be imported on PowerShell (Connect-MsolService error) #Connect to Exchange Online Import-Module MSOnline Get-Module $O365Cred = Get-Credential $O365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://pod50248psh.outlook.com/powershell-liveid?PSVersion=4.0 -Credential $O365Cred -Authentication Basic -AllowRedirection Import-PSSession $O365Session Connect-MsolService –Credential $O365Cred #Last Longon Time and Display Name in Exchange Online $mail = (Get-Mailbox | Get-MailboxStatistics) #Save information and convert to CSV $mail | Select-Object DisplayName, LastLogonTime | ConvertTo-Csv | Out-File F:\fich.csv |
(No Ratings Yet)Loading...Example 1
1 | C:\PS>Start-BitsTransfer -Source https://server01/servertestdir/testfile1.txt -Destination c:\clienttestdir\testfile1.txt |
Description ———– This command creates a new BITS transfer job that downloads a file from a server. […]
(No Ratings Yet)Loading...Creates a new Background Intelligent Transfer Service (BITS) transfer job. Syntax
1 | Start-BitsTransfer [-Source] <string[]> [[-Destination] <string[]>] [-Asynchronous] [-Authentication <string>] [-Credential <PSCredential>] [-Description <string>] [-DisplayName <string>] [-Priority <string>] [-ProxyAuthentication <string>] [-ProxyBypass <string[]>] [-ProxyCredential <PSCredential>] [-ProxyList <Uri[]>] [-ProxyUsage <string>] [-RetryInterval <int>] [-RetryTimeout <int>] [-Suspended] [-TransferType <string>] [-Confirm] [-WhatIf] [<CommonParameters>] |
Description The Start-BitsTransfer cmdlet creates a new BITS […]
(No Ratings Yet)Loading...1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 | #Important: remember change "" #Create file: #Users.csv #cn,sAMAccountname,FirstName,LastName,Password,Group #user1,user1,username,userlast,secret1123,group Import-Module ActiveDirectory #Read file Import-Csv F:\power\users.csv |%{ $nombreco=$_.FirstName + " " + $_.LastName $ru="OU=" + $_.Group + ",OU=ou3,OU=ou2,OU=ou1,DC=domain,DC=local" #Create directory in \serverdepartament $HomeDirectory="\serverdepartament" + $_.Group + "" + $_.sAMAccountname mkdir $HomeDirectory $HomeDirectory $HomeDrive=’Q:’ #Add user New-ADUser -Name $_.FirstName -SamAccountName $_.sAMAccountname -HomeDrive $HomeDrive –HomeDirectory $HomeDirectory -DisplayName $nombreco -Enabled $true -ChangePasswordAtLogon $false -AccountPassword (ConvertTo-SecureString $_.Password -AsPlainText -force) -PassThru -UserPrincipalName $_.sAMAccountname -Path $ru #Add permission for each user (sAMAccountname) $usereta="domain" + $_.sAMAccountname + ":F" $HomeDirectory + "-" + $usereta cacls $HomeDirectory /G $usereta /E #Add user into a group Add-ADGroupMember -Identity "CN=groupusers,CN=Builtin,DC=domain,DC=local" $_.sAMAccountname } |