2019-04-18 Webcast Tools

Enter-PSSession (Console User).xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>Local</CustomToolType>
    <CommandLine>Enter-PSSession $(Computer:TARGETHOSTNAME)</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
    <Mode>PowerShell</Mode>
    <Description></Description>
    <IconKey>Icon-PowerShell</IconKey>
    <KeyGesture></KeyGesture>
    <Title>Enter-PSSession (Console User)</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>

Enter-PSSession (Different Credentials).xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>Local</CustomToolType>
    <CommandLine>Enter-PSSession -ComputerName "$(Computer:TARGETHOSTNAME)" -Credential $creds</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
    <Mode>PowerShell</Mode>
    <Description></Description>
    <IconKey>Icon-PowerShell</IconKey>
    <KeyGesture></KeyGesture>
    <Title>Enter-PSSession (Different Credentials)</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>

Kris's Bag of Holding.xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.0" MinimumVersion="15.0">
  <FolderComputerTool>
    <Description></Description>
    <IconKey>Icon-Folder</IconKey>
    <KeyGesture></KeyGesture>
    <Title>Kris's Bag of Holding</Title>
    <TypeName>FolderComputerTool</TypeName>
    <Children type="list">
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>System</CustomToolType>
        <CommandLine>%WINDIR%\System32\mmc.exe dsa.msc</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>NoShell</ShellOpenMode>
        <Mode>Command</Mode>
        <Description></Description>
        <IconKey>Stock0520</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Active Directory Users and Computers</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>System</CustomToolType>
        <CommandLine>Write-Output "Executing on: `n   $env:computername"
@'
Description:
   Reset password, unlock account, and set password to change at next logon.

Command:
   $Username = Read-Host "User name"
   $NewPassword = Read-Host -AsSecureString "New Password"
   Set-ADAccountPassword -Reset -NewPassword $NewPassword -Identity $Username
   Unlock-ADAccount -Identity $Username
   Set-ADUser -Identity $Username -ChangePasswordAtLogon $True

Output:

'@

$Username = Read-Host "User name"
$NewPassword = Read-Host -AsSecureString "New Password"
Set-ADAccountPassword -Reset -NewPassword $NewPassword -Identity $Username -WhatIf
Unlock-ADAccount -Identity $Username -WhatIf
Set-ADUser -Identity $Username -ChangePasswordAtLogon $True -WhatIf</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>PowerShell</Mode>
        <Description></Description>
        <IconKey>Icon-PowerShell</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Active Directory - Reset user password</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>System</CustomToolType>
        <CommandLine>@echo off
Echo Executing on:
Echo    %COMPUTERNAME%
Echo.
Echo Description: 
Echo    Refresh Group Policy settings.
Echo.
Echo Command:
Echo    gpupdate
Echo.
Echo Output:
Echo.

gpupdate</CommandLine>
        <DefaultIconKey>Icon-Hardware</DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>Command</Mode>
        <Description></Description>
        <IconKey>Icon-CommandStep</IconKey>
        <KeyGesture></KeyGesture>
        <Title>gpupdate (local)</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>Local</CustomToolType>
        <CommandLine>@Echo off
Echo Refresh Group Policy settings on $(Computer:TARGET)
Echo If it asks to reboot, just say no.

psexec \\$(Computer:TARGETHOSTNAME) -accepteula cmd /c "echo n | (gpupdate)"</CommandLine>
        <DefaultIconKey>Icon-Hardware</DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>Command</Mode>
        <Description></Description>
        <IconKey>Icon-CommandStep</IconKey>
        <KeyGesture></KeyGesture>
        <Title>gpupdate (psexec)</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>System</CustomToolType>
        <CommandLine>while($true){
    Get-SmbConnection
    Start-Sleep 1
    Clear-Host
}</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>PowerShell</Mode>
        <Description></Description>
        <IconKey>Icon-PowerShell</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Get SMB Connections (local)</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>System</CustomToolType>
        <CommandLine>while($true){
    Get-SmbConnection
    Start-Sleep 1
    Clear-Host
}</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>PowerShell</Mode>
        <Description></Description>
        <IconKey>Icon-PowerShell</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Get SMB Connections (Remote PowerShell)</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>Local</CustomToolType>
        <CommandLine>$Pattern   = '^(?&lt;IP&gt;\d{1,3}(\.\d{1,3}){3})\s+(?&lt;Host&gt;.+)$'
$Entries   = @()
$Computer = "$(Computer:TARGET)"

$file = "\\$Computer\c$\Windows\System32\Drivers\etc\hosts"
(Get-Content -Path $File) | ForEach-Object {
    If ($_ -match $Pattern) {
        
        $Entries += "$computer,$($Matches.IP),$($Matches.Host)"
    
    }
}

$Entries</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>PowerShell</Mode>
        <Description></Description>
        <IconKey>Icon-PowerShell</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Get HOSTS file entries (local)</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>Remote</CustomToolType>
        <CommandLine>$Pattern   = '^(?&lt;IP&gt;\d{1,3}(\.\d{1,3}){3})\s+(?&lt;Host&gt;.+)$'
$Entries   = @()

$file = "C:\Windows\System32\Drivers\etc\hosts"
(Get-Content -Path $File) | ForEach-Object {
    If ($_ -match $Pattern) {
        
        $Entries += "$env:ComputerName,$($Matches.IP),$($Matches.Host)"
    
    }
}

$Entries</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>PowerShell</Mode>
        <Description></Description>
        <IconKey>Icon-PowerShell</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Get HOSTS file entries (remote)</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>Local</CustomToolType>
        <CommandLine>@echo off
Echo Description: 
Echo    Reports information about what woke the system from the last sleep transition.
Echo.
Echo Command:
Echo    psexec \\$(Computer:TARGET) -accepteula powercfg /lastwake
Echo.
Echo Output:
psexec \\$(Computer:TARGET) -accepteula powercfg /lastwake</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
        <Mode>Command</Mode>
        <Description></Description>
        <IconKey>Icon-CommandStep</IconKey>
        <KeyGesture></KeyGesture>
        <Title>PowerCfg - Lastwake</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <CustomTool>
        <CredentialsId value="null" />
        <ScanAfter>DoNotScan</ScanAfter>
        <ScanProfileId value="null" />
        <SuccessCodesText>0</SuccessCodesText>
        <Timeout>00:03:00</Timeout>
        <WakeOnLan value="false" />
        <CustomToolType>Local</CustomToolType>
        <CommandLine>"C:\Program Files (x86)\WinDirStat\WinDirStat.exe" \\$(Computer:TARGETHOSTNAME)\c$\</CommandLine>
        <DefaultIconKey></DefaultIconKey>
        <LibraryToolId value="null" />
        <Modified value="null" />
        <ShellOpenMode>CloseShell</ShellOpenMode>
        <Mode>Command</Mode>
        <Description></Description>
        <IconKey>Stock0200</IconKey>
        <KeyGesture></KeyGesture>
        <Title>Disks - WinDirStat C:\</Title>
        <TypeName>CustomTool</TypeName>
      </CustomTool>
      <FolderComputerTool>
        <Description></Description>
        <IconKey>Icon-Folder</IconKey>
        <KeyGesture></KeyGesture>
        <Title>SysInternals Examples</Title>
        <TypeName>FolderComputerTool</TypeName>
        <Children type="list">
          <CustomTool>
            <CredentialsId value="null" />
            <ScanAfter>DoNotScan</ScanAfter>
            <ScanProfileId value="null" />
            <SuccessCodesText>0</SuccessCodesText>
            <Timeout>00:03:00</Timeout>
            <WakeOnLan value="false" />
            <CustomToolType>Local</CustomToolType>
            <CommandLine>@Echo off
Echo Starting command shell on $(Computer:TARGET)

psexec \\$(Computer:TARGETHOSTNAME) -accepteula cmd</CommandLine>
            <DefaultIconKey></DefaultIconKey>
            <LibraryToolId value="null" />
            <Modified value="null" />
            <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
            <Mode>Command</Mode>
            <Description></Description>
            <IconKey>Icon-CommandStep</IconKey>
            <KeyGesture></KeyGesture>
            <Title>psexec - cmd</Title>
            <TypeName>CustomTool</TypeName>
          </CustomTool>
          <CustomTool>
            <CredentialsId value="null" />
            <ScanAfter>DoNotScan</ScanAfter>
            <ScanProfileId value="null" />
            <SuccessCodesText>0</SuccessCodesText>
            <Timeout>00:03:00</Timeout>
            <WakeOnLan value="false" />
            <CustomToolType>Local</CustomToolType>
            <CommandLine>@Echo off
Echo Get process information for $(Computer:TARGET)
Mode con: cols=80 lines=49

pslist -st \\$(Computer:TARGETHOSTNAME) -accepteula</CommandLine>
            <DefaultIconKey></DefaultIconKey>
            <LibraryToolId value="null" />
            <Modified value="null" />
            <ShellOpenMode>CloseShell</ShellOpenMode>
            <Mode>Command</Mode>
            <Description></Description>
            <IconKey>Icon-CommandStep</IconKey>
            <KeyGesture></KeyGesture>
            <Title>pslist -st</Title>
            <TypeName>CustomTool</TypeName>
          </CustomTool>
        </Children>
      </FolderComputerTool>
      <FolderComputerTool>
        <Description></Description>
        <IconKey>Icon-Folder</IconKey>
        <KeyGesture></KeyGesture>
        <Title>PuTTY Examples</Title>
        <TypeName>FolderComputerTool</TypeName>
        <Children type="list">
          <CustomTool>
            <CredentialsId value="null" />
            <ScanAfter>DoNotScan</ScanAfter>
            <ScanProfileId value="null" />
            <SuccessCodesText>0</SuccessCodesText>
            <Timeout>00:03:00</Timeout>
            <WakeOnLan value="false" />
            <CustomToolType>Local</CustomToolType>
            <CommandLine>putty.exe -telnet $(Computer:TARGETIPADDRESS)</CommandLine>
            <DefaultIconKey></DefaultIconKey>
            <LibraryToolId value="null" />
            <Modified value="null" />
            <ShellOpenMode>NoShell</ShellOpenMode>
            <Mode>Command</Mode>
            <Description></Description>
            <IconKey>Icon-CommandStep</IconKey>
            <KeyGesture></KeyGesture>
            <Title>putty - Telnet</Title>
            <TypeName>CustomTool</TypeName>
          </CustomTool>
          <CustomTool>
            <CredentialsId value="null" />
            <ScanAfter>DoNotScan</ScanAfter>
            <ScanProfileId value="null" />
            <SuccessCodesText>0</SuccessCodesText>
            <Timeout>00:03:00</Timeout>
            <WakeOnLan value="false" />
            <CustomToolType>Local</CustomToolType>
            <CommandLine>putty.exe -rlogin $(Computer:TARGETIPADDRESS)</CommandLine>
            <DefaultIconKey></DefaultIconKey>
            <LibraryToolId value="null" />
            <Modified value="null" />
            <ShellOpenMode>NoShell</ShellOpenMode>
            <Mode>Command</Mode>
            <Description></Description>
            <IconKey>Icon-CommandStep</IconKey>
            <KeyGesture></KeyGesture>
            <Title>putty - rlogin</Title>
            <TypeName>CustomTool</TypeName>
          </CustomTool>
          <CustomTool>
            <CredentialsId value="null" />
            <ScanAfter>DoNotScan</ScanAfter>
            <ScanProfileId value="null" />
            <SuccessCodesText>0</SuccessCodesText>
            <Timeout>00:03:00</Timeout>
            <WakeOnLan value="false" />
            <CustomToolType>Local</CustomToolType>
            <CommandLine>putty.exe -ssh %UserName%@$(Computer:TARGETIPADDRESS)"</CommandLine>
            <DefaultIconKey></DefaultIconKey>
            <LibraryToolId value="null" />
            <Modified value="null" />
            <ShellOpenMode>CloseShell</ShellOpenMode>
            <Mode>Command</Mode>
            <Description></Description>
            <IconKey>Icon-CommandStep</IconKey>
            <KeyGesture></KeyGesture>
            <Title>putty - ssh</Title>
            <TypeName>CustomTool</TypeName>
          </CustomTool>
        </Children>
      </FolderComputerTool>
    </Children>
  </FolderComputerTool>
</AdminArsenal.Export>

OpenSSH to Target Host Name.xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>Local</CustomToolType>
    <CommandLine>$username = Read-Host -prompt 'user?'
$target = "$(Computer:TARGETHOSTNAME)"
ssh $username@$target</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
    <Mode>PowerShell</Mode>
    <Description></Description>
    <IconKey>Icon-PowerShell</IconKey>
    <KeyGesture></KeyGesture>
    <Title>OpenSSH to Target Host Name</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>

OpenSSH to Target IP Address.xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>Local</CustomToolType>
    <CommandLine>$username = Read-Host -prompt 'user?'
$target = "$(Computer:TARGETIPADDRESS)"
ssh $username@$target</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
    <Mode>PowerShell</Mode>
    <Description></Description>
    <IconKey>Icon-PowerShell</IconKey>
    <KeyGesture></KeyGesture>
    <Title>OpenSSH to Target IP Address</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>

Prompt credentials & target to Enter-PSSession.xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>System</CustomToolType>
    <CommandLine>powershell -noexit -command "&amp;{ Read-host -prompt 'target computer?' | Enter-PSSession -Credential $creds }</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
    <Mode>Command</Mode>
    <Description></Description>
    <IconKey>Icon-CommandStep</IconKey>
    <KeyGesture></KeyGesture>
    <Title>Prompt credentials &amp; target to Enter-PSSession</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>

Prompt target to Enter-PSSession.xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>System</CustomToolType>
    <CommandLine>powershell -noexit -command "&amp;{ Read-host -prompt 'target computer?' | Enter-PSSession }</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>LeaveShellOpen</ShellOpenMode>
    <Mode>Command</Mode>
    <Description></Description>
    <IconKey>Icon-CommandStep</IconKey>
    <KeyGesture></KeyGesture>
    <Title>Prompt target to Enter-PSSession</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>

Purge Saved Event Viewer Logs.xml

<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="16.6.0.8" MinimumVersion="15.0">
  <CustomTool>
    <CredentialsId value="null" />
    <ScanAfter>DoNotScan</ScanAfter>
    <ScanProfileId value="null" />
    <SuccessCodesText>0</SuccessCodesText>
    <Timeout>00:03:00</Timeout>
    <WakeOnLan value="false" />
    <CustomToolType>System</CustomToolType>
    <CommandLine>Get-Process | Where-Object { $_.MainWindowTitle -like "*Event Viewer*" -and $_.ProcessName -like "mmc"} | Stop-Process -Force
Get-ChildItem -Path "$env:ProgramData\Microsoft\Event Viewer\ExternalLogs" | Remove-Item -Recurse -Force
Invoke-Item "$env:windir\system32\eventvwr.msc"</CommandLine>
    <DefaultIconKey></DefaultIconKey>
    <LibraryToolId value="null" />
    <Modified value="null" />
    <ShellOpenMode>NoShell</ShellOpenMode>
    <Mode>PowerShell</Mode>
    <Description></Description>
    <IconKey>Stock0300</IconKey>
    <KeyGesture></KeyGesture>
    <Title>Purge Saved Event Viewer Logs</Title>
    <TypeName>CustomTool</TypeName>
  </CustomTool>
</AdminArsenal.Export>