Jackbennett

def info_table(
    data: Any, *, headers: Union[str, Sequence[str]] = (), fileobj: FileObj = sys.stdout
) -> None:
    if headers == 'keys':
        colored_data = dict()
        plain_data   = dict()
        for row in data:
            colored_row = list()
            plain_row = list()
            for item in data[row]:

Jackbennett

PS P:\VSCode\1.30.2-inside> .\Code.exe --verbose
PS P:\VSCode\1.30.2-inside>
[main 12:04:33 PM] Starting VS Code
[main 12:04:33 PM] from: p:\VSCode\1.30.2-inside\resources\app
[main 12:04:33 PM] args: { _: [],
  help: false,
  h: false,
  version: false,
  v: false,
  wait: false,

Jackbennett

function Clear-CCTV{
    Param(
    # Directory to clear
    [parameter(mandatory=$true)]
    [string]$Path

    , # Archive Directory Path
    [parameter(mandatory=$true)]
    [string]$ArchivePath

Jackbennett

[cmdletbinding(SupportsShouldProcess=$true,DefaultParameterSetName="User")]
Param(
    [Parameter(Mandatory=$true,
               Position=0,
               ParameterSetName="User",
               ValueFromPipeline=$true,
               ValueFromPipelineByPropertyName=$true)]
    [Microsoft.ActiveDirectory.Management.ADUser[]]
    [Parameter(Mandatory=$true,
               Position=0,

Jackbennett

osquery.flags ->
--enroll_secret_path=c:\programdata\osquery\heroku.secret
--tls_server_certs=c:\programdata\osquery\demoapponherokuapp.com.pem
--tls_hostname=demoapponherokuapp.com
--host_identifier=hostname
--enroll_tls_endpoint=/api/v1/osquery/enroll
--config_plugin=tls
--config_tls_endpoint=/api/v1/osquery/config
--config_tls_refresh=10
--disable_distributed=false

Jackbennett

Because typing is hard;

set other search engines in chrome

shortcut then space or tab to start

Shortcut	Action	URL
l	complete localhost port	localhost:%s/
js	Search prefix javascript	http://www.google.co.uk/search?sourceid=chrome&ie=UTF-8&q=javascript%20%s

Jackbennett

# Get All PCs in Domain, Export to ServerList.txt
# Call get-inventory.ps1 logic on created Serverlist.txt
# dk / 22.09.2017
import-module activedirectory

$domain = "carpentier.local" 
$tempfile = "c:\temp\tmpfile.csv"
$outfile = "c:\temp\Serverlist.csv"
Get-ADComputer -Filter * |
select-object Name |

Jackbennett

$ 1..1000 | %{ measure-command { ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")}  }| sort -Descending -Property TotalMilliseconds | select -First 20 -Property TotalMilliseconds

TotalMilliseconds
-----------------
           9.2754
           0.9975
            0.195
            0.191
           0.1877
           0.1817

Jackbennett

$EndTime = Get-WinEvent -ComputerName $ComputerName -FilterHashTable @{LogName = "Microsoft-Windows-AppLocker/EXE and DLL"; ID = 8001} -MaxEvents 1
Get-WinEvent -ComputerName $ComputerName -FilterHashTable @{LogName = "Microsoft-Windows-AppLocker/EXE and DLL"; EndTime = $EndTime.TimeCreated}
write-warning $EndTime.timecreated()

Jackbennett

<LayoutModificationTemplate
    xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
    xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
    xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
    xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"
    Version="1">
  <LayoutOptions StartTileGroupCellWidth="6" />
  <DefaultLayoutOverride LayoutCustomizationRestrictionType="OnlySpecifiedGroups">
    <StartLayoutCollection>
      <defaultlayout:StartLayout GroupCellWidth="6" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout">