mbrownnycnyc

$postParams = @{ip='63.117.14.24'}
$request = Invoke-WebRequest -Uri http://www.ipvoid.com -Method POST -Body $postParams -UseBasicParsing

$innerxml = ($request.Content -split "<table class=`"table table-striped table-bordered`"")
$results = $innerxml[2] -split "<tr>"

#results[2] starts table
#results[41] ends table (but also includes rest of the page)
$i = 0
$IPVoidResults = "" | select Engine,Result

mbrownnycnyc

([wmiclass]"\\$computer\root\cimv2:win32_offlinefilescache").enable($false)

mbrownnycnyc

rem https://support.microsoft.com/en-us/kb/971058?wa=wsignin1.0

net stop bits
net stop wuauserv
net stop appidsvc
net stop cryptsvc
del /f /q "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
ren %systemroot%\SoftwareDistribution %systemroot%\SoftwareDistribution.bak
ren %systemroot%\system32\catroot2 %systemroot%\catroot2.bak
sc.exe sdset bits D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)

mbrownnycnyc

--info--
RDNS lookups are performed and the results affect delivery is configured in the ironport by default (results can be reviewed in the maillog).

The SPF checks:
pra: primarily protects against phishing and new spam campaigns.
mailfrom: primarily protects against spoofing.
helo: not really that useful.


The SPF check result meanings:

mbrownnycnyc

<?xml version='1.0' encoding='utf-8' standalone='yes'?>

<!-- http://blogs.msdn.com/b/clustering/archive/2010/01/07/9944942.aspx
install with: wevtutil im networkloadbalancing-core-diagnostic.events.man
uninstall with: wevtutil im networkloadbalancing-core-diagnostic.events.man
view stats: wevtutil gli Microsoft-Windows-NLB/Diagnostic
to start: wevtutil sl Microsoft-Windows-NLB/Diagnostic /e:true /q
to stop: wevtutil sl Microsoft-Windows-NLB/Diagnostic /e:false /q
view events as a text file first stop the provider and then use: wevtutil qe Microsoft-Windows-NLB/Diagnostic /f:text > events.txt
-->

mbrownnycnyc

#schtasks /create /tn "SSRS Recycle" /ru UserName /rl highest /np /sc daily /sd 08/01/2011 /st 02:00 /tr "powershell.exe -noprofile -executionpolicy RemoteSigned -file c:scriptsSSRSRecycle.ps1"
#http://www.pawlowski.cz/2011/07/solving-issue-long-starting-report-ssrs-2008/#comment-307
$wc = new-Object System.Net.WebClient
$httpRequest = [System.Net.HttpWebRequest]::Create("http://localhost/Reports/Pages/Folder.aspx")
$httpRequest.Credentials =[System.Net.CredentialCache]::DefaultCredentials
$httpRequest.UnsafeAuthenticatedConnectionSharing = "true"
$httpRequest.Method = "GET"
# https://msdn.microsoft.com/en-us/library/system.net.httpwebrequest.timeout%28v=vs.110%29.aspx
#set timeout to 10 mins
$httpRequest.Timeout = 600000

mbrownnycnyc

<#
.Synopsis
http://community.netapp.com/t5/Microsoft-Cloud-and-Virtualization-Discussions/SnapMirror-log-parser/td-p/43703
Produce a CSV file from a specified controller snapmirror.log
.Description
Produce a CSV file from a specified controller snapmirror.log
.Parameter Controller
Storage controller which to retrieve logs from, either provide this parameter or the UseLocalLogFile parameter
.Parameter Out
Optional output file name. If not specified, output file will be in current folder

mbrownnycnyc

description "Upstart configuration for ElasticSearch"

#copy /etc/init/moloch-elasticsearch.conf
# When to start the service
start on started network
 
# When to stop the service
stop on runlevel [016]
 
# Automatically restart the process if crashed

mbrownnycnyc

description "Upstart configuration for Capture"

#copy to /etc/init/moloch-capture.conf
# When to start the service
start on (started network and started moloch-elasticsearch)

# When to stop the service
stop on stopping moloch-elasticsearch
 
# Automatically restart the process if crashed