Skip to content

Instantly share code, notes, and snippets.

@ZeArioch
ZeArioch / GhettoEventList.sql
Created October 7, 2020 22:33
Sample query for @miriamxyra's EventList database
/*
** Ghetto query for EventList's sqlite db
**
** Source repo : https://github.com/miriamxyra/EventList
** Relative file path: ./EventList/internal/data/EventList.db
**
** success_failure_id: 1 == success, 2 == failure, 3 == success and failure
*/
select
c.category_name,
@ZeArioch
ZeArioch / keybase.md
Created October 3, 2019 14:27
Keybase proof

Keybase proof

I hereby claim:

  • I am zearioch on github.
  • I am zearioch (https://keybase.io/zearioch) on keybase.
  • I have a public key ASBTBIGlXSaTBQ-fOaPMKPJJygHc4Fts0t32d_fxssS_rAo

To claim this, I am signing this object:

@ZeArioch
ZeArioch / ParseO365AuditLog.ps1
Created April 4, 2018 20:49
Parse JSON data structures from Office 365 Audit Logs
$InputFileName = "FIXME\path\to\auditlog-json.txt"
$OutputFileName = "FIXME\path\to\out-auditlog-json-01-logins-IP-UA.csv"
Get-Content $InputFileName | ForEach-Object {
$_ | ConvertFrom-Json | Where-Object {$_.Operation -eq 'UserLoggedIn'} -OutVariable TempLine | Out-Null
$ExtProps = $TempLine.ExtendedProperties
$UserAgent = '<NO UA>'
if ($ExtProps) {
foreach ($Property in $ExtProps) {
If ($Property.Name -eq 'UserAgent') {