soulemike

targetScope = 'subscription'
param name string = guid(utcNow())
@description('Long Name of your Partner Center Offering')
param definitionName string
param definitionDescription string = ''
@description('The Service Provider\'s Azure AD Tenant GUID')
param managedByTenantId string
@description('The AdminAgents, or other, Azure AD Group GUID')
param adminAgents string
param authorizations array = [

soulemike

function installer
{
    Try
    {
        $logs=Get-EventLog -List
        $source="SMB Monitoring"
        if(-not ($logs.Log -contains "Sentinel"))
        {
            New-EventLog -LogName Sentinel -Source $source
            Limit-EventLog -LogName "Sentinel" -OverflowAction OverwriteAsNeeded -MaximumSize 20MB

soulemike

SELECT
    s.session_id,
    c.connect_time,
    s.login_time,
    s.login_name,
    c.protocol_type,
    c.auth_scheme,
    s.HOST_NAME,
    s.program_name
FROM sys.dm_exec_sessions s

soulemike

gci Cert:\LocalMachine\My\ | Select Thumbprint, Subject, @{N="Template";E={($_.Extensions|?{$_.Oid.FriendlyName -eq "Certificate Template Information"}).Format(0)}}|?{$_.Template -like "*RDP NLA*"}|%{& certutil -delstore my $_.Thumbprint}

soulemike

$remoteDomain=@(
    "10.0.0.10",
    "10.0.0.20",
    "domain.local"
)

function New-Task([int]$index,[string]$target,[int]$port,[scriptblock]$ScriptBlock)
{
    $ps = [Management.Automation.PowerShell]::Create()
    $res = New-Object PSObject -Property @{

soulemike

Import-Module ActiveDirectory
Import-Module DnsServer
Import-Module PKI
Import-Module Microsoft.WSMan.Management

#######################
### Once Per Domain ###
#######################
#Generate a new self-signed wildcard certificate for the domain
$cert = New-SelfSignedCertificate -DnsName "*.$($env:USERDNSDOMAIN)","localhost" -CertStoreLocation Cert:\LocalMachine\My\ -NotAfter (Get-Date).AddYears(5)

soulemike

# Add *.local.ad and 10.*.*.* to Intranet Zones
# Zones Enum https://learn.microsoft.com/en-us/troubleshoot/developer/browsers/security-privacy/ie-security-zones-registry-entries#zones
New-Item -Force -Path 'HKLM:\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains'
New-Item -Force -Path 'HKLM:\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\local.ad'
Set-ItemProperty -Force -Type DWord -Path 'HKLM:\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\local.ad' -Name * -Value 00000001
New-Item -Force -Path 'HKLM:\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges'
New-Item -Force -Path 'HKLM:\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1'
Set-ItemProperty -Force -Type DWord -Path 'HKLM:\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1' -Name * -Value 00000001
Set-ItemProperty -Force -Path 'HKLM:\D

soulemike

#https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-assign-permissions?tabs=azure-powershell#share-level-permissions-for-all-authenticated-identities
Get-AzStorageAccount|%{
    $x=$_;
    $_.AzureFilesIdentityBasedAuth|?{$_.DefaultSharePermission -eq $null}|%{
        Set-AzStorageAccount -DefaultSharePermission "StorageFileDataSmbShareContributor" -ResourceGroupName $x.ResourceGroupName -AccountName $x.StorageAccountName
    }
}

soulemike

#Clean up stopped containers
sudo docker ps -a | grep Exit | cut -d ' ' -f 1 | xargs sudo docker rm

soulemike

$s='wind\x6f\x77["\x64oc\x75\x6den\x74"\x5d\x2ec\x72\x65a\x74\x65E\x6cemen\x74'
($s|Select-String -Pattern "([.\\][.x].{2})" -AllMatches).Matches.Value|select -Unique|%{$s=$s.Replace([string]$_,[char]([convert]::ToInt16($_.Substring(2,2),16)))}
#window["document"].createElement