From 5560bbeecbd2e0be0a1c824ba8b5d5720f3430d4 Mon Sep 17 00:00:00 2001 From: silversword411 Date: Fri, 29 Oct 2021 06:48:41 -0400 Subject: [PATCH 1/2] scripts - Defender status adding full details --- scripts/Win_Defender_Status_Report.ps1 | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/scripts/Win_Defender_Status_Report.ps1 b/scripts/Win_Defender_Status_Report.ps1 index efe5c5d6..f1caf96b 100644 --- a/scripts/Win_Defender_Status_Report.ps1 +++ b/scripts/Win_Defender_Status_Report.ps1 @@ -1,11 +1,14 @@ <# .Synopsis - Defender - Status Report + Defender - Status Report .DESCRIPTION - This will check Event Log for Windows Defender Malware and Antispyware reports, otherwise will report as Healthy. By default if no command parameter is provided it will check the last 1 day (good for a scheduled daily task). - If a number is provided as a command parameter it will search back that number of days back provided (good for collecting all AV alerts on the computer). + This will check Event Log for Windows Defender Malware and Antispyware reports, otherwise will report as Healthy. By default if no command parameter is provided it will check the last 1 day (good for a scheduled daily task). + If a number is provided as a command parameter it will search back that number of days back provided (good for collecting all AV alerts on the computer). .EXAMPLE - Win_Defender_Status_reports.ps1 365 + Win_Defender_Status_reports.ps1 365 +.NOTES + v1 dinger initial release 2021 + v1.1 bdrayer Adding full message output if items found #> $param1 = $args[0] @@ -20,7 +23,7 @@ else { if (Get-WinEvent -FilterHashtable @{LogName = 'Microsoft-Windows-Windows Defender/Operational'; ID = '1116', '1118', '1015', '1006', '5010', '5012', '5001', '1123'; StartTime = $TimeSpan }) { Write-Output "Virus Found or Issue with Defender" - Get-WinEvent -FilterHashtable @{LogName = 'Microsoft-Windows-Windows Defender/Operational'; ID = '1116', '1118', '1015', '1006', '5010', '5012', '5001', '1123'; StartTime = $TimeSpan } + Get-WinEvent -FilterHashtable @{LogName = 'Microsoft-Windows-Windows Defender/Operational'; ID = '1116', '1118', '1015', '1006', '5010', '5012', '5001', '1123'; StartTime = $TimeSpan } | Format-List TimeCreated, Id, LevelDisplayName, Message exit 1 } @@ -32,4 +35,4 @@ else { } -Exit $LASTEXITCODE +Exit $LASTEXITCODE \ No newline at end of file From a9aedea2bd6cf6c6a1834f16421bd8f30b384dd4 Mon Sep 17 00:00:00 2001 From: silversword411 Date: Tue, 2 Nov 2021 11:28:24 -0400 Subject: [PATCH 2/2] docs Linking to Traefik howto --- docs/docs/unsupported_scripts.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/docs/unsupported_scripts.md b/docs/docs/unsupported_scripts.md index dd5678ed..17920a00 100644 --- a/docs/docs/unsupported_scripts.md +++ b/docs/docs/unsupported_scripts.md @@ -21,6 +21,8 @@ Is NATS (). You'll need a TCP forwarder as NATS only talks TCP ## Traefikv2 +Offsite Resource: + This section will assume that by default Traefik will reverse proxy everything on port 443. Here is a basic Traefik config with docker-composer note the file.directory and file.watch are important.