Skip to content

Instantly share code, notes, and snippets.

Avatar

Colby Bouma Colby-PDQ

View GitHub Profile
View Latitude 5580, 5590, 7380, 7390.xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="19.1.38.0" MinimumVersion="4.0">
<Collection>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>Computer</Table>
<Column>Manufacturer</Column>
@Colby-PDQ
Colby-PDQ / Duplicate MAC Addresses.sql
Last active Jul 2, 2020
PDQ Inventory Report for finding duplicate MAC Addresses
View Duplicate MAC Addresses.sql
SELECT
Computers.Name AS "Computer Name"
, MACDuplicates.MacAddress AS "MAC Address"
FROM
-- https://stackoverflow.com/a/21980136
(
SELECT
Computers.MacAddress
, COUNT(*) AS "Count"
FROM
View Report-DHCP-Static IP Address.xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="12.2.0.0" MinimumVersion="3.1">
<Report>
<ReportDefinition name="Definition">
<Sql>SELECT Computers.Name AS 'Computer Name', Computers.IPAddress AS 'IP Address', 'STATIC' AS 'Type' FROM Computers
WHERE Computers.IPAddress IN
(SELECT value FROM RegistryEntries
WHERE RegistryPathId IN (SELECT RegistryPathId FROM RegistryPaths
WHERE lower(PathName) LIKE 'system\currentcontrolset\services\tcpip\parameters%')
AND Name = 'IPAddress')
@Colby-PDQ
Colby-PDQ / Trigger Heartbeat Schedules.xml
Created Feb 11, 2020
A PDQ Inventory Tool that creates a firewall rule to block ICMPv4 to the target you specify.
View Trigger Heartbeat Schedules.xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.3.32.0" MinimumVersion="15.0">
<CustomTool>
<CredentialsId value="null" />
<RunAs>Admin</RunAs>
<ScanAfter>DoNotScan</ScanAfter>
<ScanProfileId value="null" />
<SuccessCodesText>0</SuccessCodesText>
<Timeout>00:00:30</Timeout>
<WakeOnLan value="false" />
@Colby-PDQ
Colby-PDQ / Intel SA-00086 Collections.xml
Created Dec 4, 2019
Collections, a Scan Profile, Reports, and a Package for this blog: https://www.pdq.com/blog/intel-sa-00086/
View Intel SA-00086 Collections.xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="14.1.0.0" MinimumVersion="4.0">
<Collection>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>Computer</Table>
<Column>Name</Column>
@Colby-PDQ
Colby-PDQ / Remove PreForm Registry Keys.ps1
Created Nov 7, 2019
Removes Registry keys that PreForm leaves behind
View Remove PreForm Registry Keys.ps1
# Check both Uninstall keys just to be sure
$RegistryPaths = @(
"HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall"
"HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall"
)
ForEach ( $RegistryPath in $RegistryPaths ) {
$RegistryKeys = Get-ChildItem "$RegistryPath" | Where-Object Name -match "PreForm"
@Colby-PDQ
Colby-PDQ / Display Drivers (GPUs).xml
Created Nov 5, 2019
A PDQ Inventory report that shows the model number, driver version, and driver date for AMD, ATI, Intel, and NVIDIA GPUs
View Display Drivers (GPUs).xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.1.38.0" MinimumVersion="3.1">
<Report>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>HardwareDevice</Table>
<TableTitle>Hardware Device</TableTitle>
@Colby-PDQ
Colby-PDQ / PDQ Inventory Scan Request Client.ps1
Created Oct 17, 2019
Example code for invoking a PDQ Inventory scan from a target machine.
View PDQ Inventory Scan Request Client.ps1
Invoke-RestMethod "http://$YourPDQServer:$Port/ScanRequest/$env:COMPUTERNAME
View Firewall Status - Scan Profile.xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.1.0.0" MinimumVersion="14.0">
<ScanProfile>
<Collections type="list" />
<Scanners type="list">
<Scanner>
<ExcludePattern></ExcludePattern>
<Hive>HKEY_LOCAL_MACHINE</Hive>
<IncludePattern>System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\*Profile\</IncludePattern>
<RowLimit value="2500" />
View Deployment Error - 1603.xml
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.1.0.0" MinimumVersion="3.1">
<Report>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>PDQDeployment</Table>
<TableTitle>Deployment</TableTitle>