Skip to content

Instantly share code, notes, and snippets.

View Colby-PDQ's full-sized avatar

Colby Bouma Colby-PDQ

View GitHub Profile
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="19.1.38.0" MinimumVersion="4.0">
<Collection>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>Computer</Table>
<Column>Manufacturer</Column>
@Colby-PDQ
Colby-PDQ / Duplicate MAC Addresses.sql
Last active July 2, 2020 16:44
PDQ Inventory Report for finding duplicate MAC Addresses
SELECT
Computers.Name AS "Computer Name"
, MACDuplicates.MacAddress AS "MAC Address"
FROM
-- https://stackoverflow.com/a/21980136
(
SELECT
Computers.MacAddress
, COUNT(*) AS "Count"
FROM
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="12.2.0.0" MinimumVersion="3.1">
<Report>
<ReportDefinition name="Definition">
<Sql>SELECT Computers.Name AS 'Computer Name', Computers.IPAddress AS 'IP Address', 'STATIC' AS 'Type' FROM Computers
WHERE Computers.IPAddress IN
(SELECT value FROM RegistryEntries
WHERE RegistryPathId IN (SELECT RegistryPathId FROM RegistryPaths
WHERE lower(PathName) LIKE 'system\currentcontrolset\services\tcpip\parameters%')
AND Name = 'IPAddress')
@Colby-PDQ
Colby-PDQ / Trigger Heartbeat Schedules.xml
Created February 11, 2020 18:02
A PDQ Inventory Tool that creates a firewall rule to block ICMPv4 to the target you specify.
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.3.32.0" MinimumVersion="15.0">
<CustomTool>
<CredentialsId value="null" />
<RunAs>Admin</RunAs>
<ScanAfter>DoNotScan</ScanAfter>
<ScanProfileId value="null" />
<SuccessCodesText>0</SuccessCodesText>
<Timeout>00:00:30</Timeout>
<WakeOnLan value="false" />
@Colby-PDQ
Colby-PDQ / Intel SA-00086 Collections.xml
Created December 4, 2019 22:26
Collections, a Scan Profile, Reports, and a Package for this blog: https://www.pdq.com/blog/intel-sa-00086/
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="14.1.0.0" MinimumVersion="4.0">
<Collection>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>Computer</Table>
<Column>Name</Column>
@Colby-PDQ
Colby-PDQ / Remove PreForm Registry Keys.ps1
Created November 7, 2019 00:45
Removes Registry keys that PreForm leaves behind
# Check both Uninstall keys just to be sure
$RegistryPaths = @(
"HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall"
"HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall"
)
ForEach ( $RegistryPath in $RegistryPaths ) {
$RegistryKeys = Get-ChildItem "$RegistryPath" | Where-Object Name -match "PreForm"
@Colby-PDQ
Colby-PDQ / Display Drivers (GPUs).xml
Created November 5, 2019 22:18
A PDQ Inventory report that shows the model number, driver version, and driver date for AMD, ATI, Intel, and NVIDIA GPUs
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.1.38.0" MinimumVersion="3.1">
<Report>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>HardwareDevice</Table>
<TableTitle>Hardware Device</TableTitle>
@Colby-PDQ
Colby-PDQ / PDQ Inventory Scan Request Client.ps1
Created October 17, 2019 22:19
Example code for invoking a PDQ Inventory scan from a target machine.
Invoke-RestMethod "http://$YourPDQServer:$Port/ScanRequest/$env:COMPUTERNAME
@Colby-PDQ
Colby-PDQ / Firewall Status - Scan Profile.xml
Created October 14, 2019 16:25
A Scan Profile, Dynamic Collection, and Basic Report for firewall status. Built for https://help.pdq.com/hc/en-us/community/posts/360054465291-Firewall-Status-on-all-PC-s-
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.1.0.0" MinimumVersion="14.0">
<ScanProfile>
<Collections type="list" />
<Scanners type="list">
<Scanner>
<ExcludePattern></ExcludePattern>
<Hive>HKEY_LOCAL_MACHINE</Hive>
<IncludePattern>System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\*Profile\</IncludePattern>
<RowLimit value="2500" />
<?xml version="1.0" encoding="utf-8"?>
<AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="18.1.0.0" MinimumVersion="3.1">
<Report>
<ReportDefinition name="Definition">
<RootFilter name="Filter">
<Comparison>All</Comparison>
<Filters type="list">
<ValueFilter>
<Table>PDQDeployment</Table>
<TableTitle>Deployment</TableTitle>