Audit Windows network connections and identify the processes, services, ports and IP addresses needed to diagnose firewall and application failures.

This lab demonstrates how to create, test, sign and enforce a WDAC policy using PowerShell, SignTool, Secure Boot and the EFI system partition. It also explains the difference between signed and unsigned WDAC, the benefits of tamper-resistant application control, and the additional certificate management, recovery planning and administrative overhead that signed policies introduce.

My scripting language of choice is PowerShell. For my sins, and there are plenty, I am a Microsoft engineer. Life choices were made, clearly not all of them wise. Still, PowerShell is built into Windows. Then there is PowerShell's QuickEdit. QuickEdit is one of those “helpful” Windows console features that sounds useful right up until it parks a Tank on top of your deployment script. It lets you interact with a running PowerShell window, select text directly from the co

PowerShell ISE has a dark theme, let's face it, it's sub-optimal, half-arsed and clearly created by Microsoft. So I've fixed it myself with a Tenaka Theme for ISE.

This guide is about making the jump into .NET as an IT admin, namely me. I’ve reached the limits of what I can realistically achieve with just PowerShell and need to push further. To be clear, I’m not a developer, my developer friends will attest to this by reminding me that PowerShell isn't a proper programming language and I should stop messing around. For my sins, I’m a Microsoft professional wishing he had gone the Linux route, who hates repetitive manual work. So

LOLDrivers using old but legitimately signed drivers are dangerous because they provide a trusted execution path straight into the Windows kernel, where most modern security controls have no visibility. Once a vulnerable driver is loaded, an attacker can abuse known flaws to gain arbitrary kernel read and write access, disable security features, tamper with credential protections, and hide processes or files, all while appearing “trusted” because the driver is signed.

The goal is to use PowerShell to create a GPO and a WMI filter for the PDC. The PDC is the authoritative time source in a Domain and it’s vital that only the PDC syncs with the upstream time source. Every other domain controller should, in turn, sync from the PDC, maintaining a proper hierarchy and preventing clock chaos

Hey PowerShell enthusiasts! Ever wondered how to beef up your script security? Not every system gets the luxury of a Certificate...

In this post, we'll delve into the automated deployment of a Domain using PowerShell in tandem with a JSON configuration file.

Welcome back to the continuation of our series on deploying Domain Controllers using PowerShell and JSON. If you've been following along with Part 1, you should now have a newly configured Domain Controller with a delegated Organizational Unit (OU) structure in place.

Introduction Reporting on AppLocker rules is crucial to maintaining security. It provides insight into allowed and blocked applications,...

This walkthrough covers how to set up and deploy an AWS Lambda Custom Runtime for PowerShell from within Windows Subsystem for Linux 2 (WSL2). We’ll go through the environment setup, packaging, and deployment process so you can build and run PowerShell-based Lambda functions without needing a full Linux host.

This walkthrough covers how to set up and deploy an AWS Lambda Custom Runtime for PowerShell from within Windows Subsystem for Linux 2 (WSL2). We’ll go through the environment setup, packaging, and deployment process so you can build and run PowerShell-based Lambda functions without needing a full Linux host. - Lets import some Moduels

This post walks through how to use PowerShell to set up targeted delegation for DNS, creating the right AD groups with clear scopes and following Microsoft’s recommended naming conventions.

In this article, I'll describe the process of Code Signing PowerShell scripts from a Microsoft CA. I'll not cover how Code Signing adds security, simply put Code Signing doesn't provide or was intended to provide a robust security layer.

How to Delegate Active Directory OU's with PowerShell Today is a quick explanation regarding OU delegation using PowerShell with usable examples and how-to located the GUID that identifies the object type being delegated.

Tried merging GPOs with PowerShell? It’s not as straightforward as it sounds, PowerShell is really just providing logic around LGPO.exe. Still, the method below does the job of merging disparate GPOs for domain deployment.

If you’ve ever tried managing Group Policies with PowerShell, you’ll know Microsoft’s support is… less than ideal (read: nonexistent). Sure, there are paid third-party tools to fill the gap, but you can also just follow this article and get it done for free.

Ever wondered what all those Windows Guids translated to in User Rights Assigments? Follow the link and run the script with Admin...

Thousands of files, no structure, let's get them organised into months and years with PowerShell. Duplicates are moved to another directory for review.