For more info:
https://garytown.com/kb5025885-dealing-cve-2023-24932-with-proactive-remediation-configuration-items
Bugs have been reported, I'm trying to test now, I've uploaded a v2 version with some edits, see scripts for more details.
If anyone knows a good way to manually trigger PRs on endpoints to make testing easier, please let me know!