Skip to content

Commit 9f85f6e

Browse files
committed
Update readme.md.
1 parent 9fd3aee commit 9f85f6e

File tree

1 file changed

+30
-0
lines changed

1 file changed

+30
-0
lines changed

README.md

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -74,6 +74,34 @@ MyComputer Default-First-Site
7474

7575
---
7676

77+
### Get-ApplockerWinEvent
78+
Gets Applocker events based on given critera from the local or remote machine(s).
79+
80+
```
81+
PS C:\> Get-ApplockerWinEvent -MaxEvents 2
82+
83+
84+
ProviderName: Microsoft-Windows-AppLocker
85+
86+
TimeCreated Id LevelDisplayName Message
87+
----------- -- ---------------- -------
88+
10/5/2017 8:17:59 AM 8005 Information %OSDRIVE%\USERS\dotps1\DOCUMENTS\GITHUB\PSFUNCTIONS\FUNCTIONS\GET-APPLOCKERWINEVENT.PS1 was allowed to run.
89+
10/5/2017 8:15:10 AM 8002 Information %PROGRAMFILES%\GIT\MINGW64\BIN\GIT.EXE was allowed to run.
90+
91+
92+
PS C:\> Get-ApplockerWinEvent -MaxEvents 2 -Oldest -LogName ExeAndDll -Credential (Get-Credential) -ComputerName myremotebox
93+
94+
95+
ProviderName: Microsoft-Windows-AppLocker
96+
97+
TimeCreated Id LevelDisplayName Message
98+
----------- -- ---------------- -------
99+
10/5/2017 7:33:43 AM 8002 Information %OSDRIVE%\USERS\dotps1\APPDATA\LOCAL\MICROSOFT\ONEDRIVE\ONEDRIVESTANDALONEUPDATER.EXE was prevented from running.
100+
10/5/2017 7:33:43 AM 8002 Information %PROGRAMFILES%\GIT\CMD\GIT.EXE was allowed to run.
101+
```
102+
103+
---
104+
77105
### Get-EternalBlueVulnerabilityStatistics
78106
Test for applicable patches to prevent the WannaCry/WannaCrypt malware. Tests for the SMB1 protocol and component.
79107

@@ -104,6 +132,8 @@ Port139Enabled : True
104132
Port445Enabled : True
105133
```
106134

135+
---
136+
107137
### Get-ItemExtendedAttribute
108138
Get extended item metadeta attribute value from an item using COM and referenced by attribute number.
109139

0 commit comments

Comments
 (0)