diff --git a/api/tacticalrmm/scripts/community_scripts.json b/api/tacticalrmm/scripts/community_scripts.json index 9782b09b..bfaa2fcd 100644 --- a/api/tacticalrmm/scripts/community_scripts.json +++ b/api/tacticalrmm/scripts/community_scripts.json @@ -229,5 +229,12 @@ "name": "AD - Check and Enable AD Recycle Bin", "description": "Only run on Domain Controllers, checks for Active Directory Recycle Bin and enables if not already enabled", "shell": "powershell" + }, + { + "filename": "Check_Events_for_Bluescreens.ps1", + "submittedBy": "https://github.com/dinger1986", + "name": "Event Viewer - Check for Bluescreens", + "description": "This will check for Bluescreen events on your system", + "shell": "powershell" } ] diff --git a/scripts/Check_Events_for_Bluescreens.ps1 b/scripts/Check_Events_for_Bluescreens.ps1 new file mode 100644 index 00000000..aaec43c1 --- /dev/null +++ b/scripts/Check_Events_for_Bluescreens.ps1 @@ -0,0 +1,20 @@ +# This will check for Bluescreen events on your system + +$ErrorActionPreference= 'silentlycontinue' +$TimeSpan = (Get-Date) - (New-TimeSpan -Day 1) + +if (Get-WinEvent -FilterHashtable @{LogName='application';ID='1001';ProviderName='Windows Error Reporting';Level=4;Data='BlueScreen';StartTime=$TimeSpan}) + +{ +Write-Output "There has been bluescreen events detected on your system" +Get-WinEvent -FilterHashtable @{LogName='application';ID='1001';ProviderName='Windows Error Reporting';Level=4;Data='BlueScreen';StartTime=$TimeSpan} +exit 1 +} + +{ +else +Write-Output "No bluescreen events detected" +exit 0 +} + +Exit $LASTEXITCODE \ No newline at end of file