Skip to content

Instantly share code, notes, and snippets.

View seanosullivanuk's full-sized avatar
I make stuff (up)

Sean O'Sullivan seanosullivanuk

I make stuff (up)
View GitHub Profile
@seanosullivanuk
seanosullivanuk / log4jscanner-batchscript.bat
Created December 21, 2021 09:11
Qualys Log4JScanner, PDQ Deploy script
:: This is a script I've set up in PDQ Deploy. Be sure to run this as administrator.
:: Also, not my best work... but it does work.
:: Replace servername and hiddenshare$ with your own UNC path info
set host=%COMPUTERNAME%
copy "\\servername\hiddenshare$\Log4JResults\Log4jScanner.exe" "%userprofile%\AppData\Roaming\Log4jScanner.exe"
"%userprofile%\AppData\Roaming\Log4jScanner.exe" > "\\servername\hiddenshare$\Log4JResults\Results\%host%.txt"
del "%userprofile%\AppData\Roaming\Log4jScanner.exe"
@seanosullivanuk
seanosullivanuk / rdusersessions.ps1
Created May 10, 2021 11:58
Export CSV of existing RDS User Sessions
Get-RDUserSession -ConnectionBroker "server.fqdn.example.com" | Export-Csv -Path c:\temp\connections.csv -NoTypeInformation
@seanosullivanuk
seanosullivanuk / ShareandNTFS.ps1
Created December 12, 2020 15:30
Create a folder, add a hidden share, set NTFS permissions and disable inheritance
#Install-Module -Name NTFSSecurity
$user = "test.user"
$domain = "contoso"
# Create the folder and share it
New-Item -Path D:\Employees\$user -ItemType directory
New-SmbShare -Name "$user$" -Path "D:\Employees\$user" -ChangeAccess "$domain\$user"
# Set file permissions (change to taste)
@seanosullivanuk
seanosullivanuk / DisableEXCHIMAPPop.ps1
Created December 3, 2020 11:48
Exchange Online - Disable IMAP and POP for current and future mailboxes
#Turn off IMAP and POP for future mailboxes
Get-CASMailboxPlan -Filter {ImapEnabled -eq "true" -or PopEnabled -eq "true" } | set-CASMailboxPlan -PopEnabled $false
#Turn it off on all existing mailboxes
Get-CASMailbox -Filter {ImapEnabled -eq "true" -or PopEnabled -eq "true" } | Select-Object @{n = "Identity"; e = {$_.primarysmtpaddress}} | Set-CASMailbox -ImapEnabled $false -PopEnabled $false
@seanosullivanuk
seanosullivanuk / AZObjectID.ps1
Last active December 1, 2020 13:32
Get the Azure AD ObjectID of a specific UPN
Connect-AzureAD
Get-AzureADUser -ObjectId "example.user@contoso.com"
@seanosullivanuk
seanosullivanuk / ADAccountsWOInheritance.ps1
Created November 17, 2020 14:53
List all Active Directory user accounts that have their security inheritance disabled
Get-ADUser -SearchBase "OU=Users,DC=internal,DC=example,DC=co,DC=uk" -Filter * -Properties nTSecurityDescriptor | ?{ $_.nTSecurityDescriptor.AreAccessRulesProtected -eq "True" }
@seanosullivanuk
seanosullivanuk / calperm.ps1
Created October 15, 2020 10:15
Manage Calendar permissions on an Exchange Online mailbox
# View the existing Calendar permissions on the Break Room mailbox
Get-MailboxFolderPermission -Identity breakroom@example.co.uk:\Calendar
# Add John Smith to the Break Room mailbox's calendar, as Reviewer
Add-MailboxFolderPermission -Identity breakroom@example.co.uk:\Calendar -User john.smith@example.co.uk -AccessRights Reviewer
# You can change existing access to the Break Room calendar, with the Set commandlet
Set-MailboxFolderPermission -Identity breakroom@example.co.uk:\Calendar -User john.smith@example.co.uk -AccessRights Editor
# When you are done, use the Remove commandlet
@seanosullivanuk
seanosullivanuk / changeIcon.js
Created October 11, 2020 17:35
Changing the icon within a Chromium extension, depending upon the OS' dark mode status
// Functions to change the app icon depending upon light or dark mode
function updateIconLightMode() {
chrome.browserAction.setIcon({
path : {
"32": "assets/appicons/32.png",
"24": "assets/appicons/24.png",
"16": "assets/appicons/16.png"
}
});
@seanosullivanuk
seanosullivanuk / exportaduseraccountscsv.ps1
Created October 2, 2020 09:12
Export a list of Active Directory user accounts to a CSV, grabbing specific properties.
Get-ADUser -Filter 'title -ne 0' -Properties givenName,sn,title,mail,sAMAccountName |select-object givenName,sn,title,mail,sAMAccountName | convertto-csv -Delimiter "`t" -NoTypeInformation | Select-Object -Skip 1 | % { $_ -replace '"', ""} | out-file "EmployeeExport.csv" -fo -en ascii
@seanosullivanuk
seanosullivanuk / customdomaindkim.ps1
Created September 26, 2020 19:32
Enable DKIM on a custom domain, with Microsoft 365 Exchange Online
# First, create a new DKIM Signing config for your custom domain
New-DkimSigningConfig -DomainName novelica.co.uk -Enabled $true
# Next, output the necessary CNAME records you need to create
Get-DkimSigningConfig -Identity novelica.co.uk | Format-List Selector1CNAME, Selector2CNAME
# Once the CNAME records are in your DNS, enable DKIM signing