4 Dec 19

One script to get an overview of all your clients open ports and CVE vulnerabilities using Powershell, ConnectWise Automate and Shodan’s free API

2019-12-04T00:59:43+00:00December 4th, 2019|

Following a day recently where Shodan sold lifetime memberships for $1, and inspired by how simple their API was to use as highlighted initially by Kelvin Tegelaar (CyberDrain.com) I decided that it was a perfect opportunity to utilise my AutomateAPI to get decent, actionable information out of the Shodan API. The output of this script includes ports that have [...]

2 Dec 19

Security Monitoring with Powershell – Ensuring Windows Firewall Integrity

2019-12-02T14:03:57+00:00December 2nd, 2019|

Though you can get products that replace or enhance the built-in firewall on Windows machines, there are still signficant amounts of agents that rely on the Windows Firewall as the last line of defense between the outside world and one of your workstations. Getting the state of the firewalls is not as easy as you would think as it's [...]

12 Nov 19

Security Monitoring with Powershell – Dangerous group memberships

2019-11-12T21:43:11+00:00November 12th, 2019|

This is the first in hopefully what will become a series of blog posts that less focus on monitoring explicitly with ConnectWise Automate, but more on security monitoring that all MSPs can use in conjunction with their own RMM. I've been writing Powershell for monitoring for many years now, but the inspiration to present it like this came from [...]

24 Oct 19

Important – urgent ConnectWise Control update needed by 30th October

2019-10-24T14:57:43+01:00October 24th, 2019|

Hello everyone! ConnectWise put out an important notice today that has the potential to affect your ability to remote control machines if not sorted. Their announcement as below: "Connectwise discovered an issue that will impact all versions prior to the latest version in the 19.0 release. Be aware that there is no minimum Automate Version or CWC Automate Plugin version [...]

20 Aug 19

New Report – Active Directory User Health Report

2019-08-20T22:58:12+01:00August 20th, 2019|

I am happy to bring to you a report I have been working on for a long time. This report (heavily customisable with the included instructions) helps you take ownership of all thing Active Directory by providing information on Active Directory settings, Enabled Users, Disabled Users, Newly Created Users, Domain Admin membership and Group Membership. All that you need [...]

1 Jul 19

How to enable enhanced debugging for the Report Center

2019-12-10T18:32:58+00:00July 1st, 2019|

I get asked this a lot so figured it was worth putting in to a post! Open the Dashboard, System > Configuration > Dashboard Go to the Config tab Go to the Configuration tab Go to the Properties tab Sort the properties by name, and see if one exists called plugin_reportcenter_loglevel If it does exist, make sure its value is set to 6 If it does not [...]

10 Jun 19

I’m going to IT Nation Explore!

2019-12-10T18:33:59+00:00June 10th, 2019|

Hello everyone, all though some of you may already know for those that don't I am going to be at the IT Nation Explore (Previously Automation Nation) event in Florida. I'll be getting there Wednesday evening and leaving Sunday evening. Please feel free to seek me out and I hope to meet as many people as I can (look [...]

3 Apr 19

Free Report – Get a second opinion on your patching

2019-12-10T18:33:52+00:00April 3rd, 2019|

For a good while now I have been relatively cynical of the "100% Compliant" statistic that I see on certain servers in the Patch Manager and I have been considering how best to approach finding problems with patching that were not otherwise being highlighted. I designed this report to follow an important Automate mantra; trust, but verify. This report [...]

20 Feb 19

Scripting – Easily convert multiple Powershell variables into Automate Script Variables

2019-12-10T18:33:46+00:00February 20th, 2019|

This concept really helps when you want to get multiple, individual items outside of a Powershell script and into multiple Automate scripting variables without messing about running a script multiple times to get different outputs. Step 1 In the scripting engine add a script step that does an Execute Script > Powershell. Add the following script in Script to [...]

8 Dec 18

Remote Monitor Series: Security! Finding members of local groups that shouldn’t be there (like Remote Desktop Users)

2018-12-08T00:15:45+00:00December 8th, 2018|

A bit more of a complex monitor today! This monitor allows for the checking of all the members of any local group (domain groups will also work if done on a DC) and allow you to trigger an alert if accounts are found that shouldn't be there. The biggest usage for this in my experience is detecting for users [...]

4 Dec 18

Remote Monitor Series: Finding machines/agents with a non-default host file

2018-12-04T00:11:02+00:00December 4th, 2018|

The idea for this monitor was triggered by a problem someone posted about in the LabTechGeek Slack. This monitor will find any modifications that have been made to a standard windows host file, and return them. The test should be setup to do a condition contains "Standard host file" minus the ". [crayon-5df4a4f48da74630325585/] Remote Monitor Tips Remote monitors can [...]

8 Nov 18

Remote Monitor Series: Finding machines that have over 50GB OST files for Outlook

2018-11-08T22:17:15+00:00November 8th, 2018|

This is a great proactive monitor because in most cases anyone who has over 50GB of OST files normally has an Outlook that runs like a snail or constantly crashes [crayon-5df4a4f48dc2b348098842/] Remote Monitor Tips For a Powershell remote monitor, any " that is used inside the Powershell needs to be escaped with a backslash \ A Powershell remote monitor [...]

8 Nov 18

Remote Monitor Series: Finding machines where Bitlocker is not protecting drives

2018-11-08T21:01:45+00:00November 8th, 2018|

This is going to be the first in a number of blog posts that will give ideas/starting points for adding more value to your client monitoring. In this series I will not be focusing on how to create these monitors, more the code that can be used. I cover creating remote monitor creation here if you are not sure how to [...]

3 Oct 18

SOGU File Searcher – ConnectWise Automate Script

2018-10-03T23:23:46+01:00October 3rd, 2018|

Following the release today by the United States Computer Emergency Readiness Team (https://www.us-cert.gov/APTs-Targeting-IT-Service-Provider-Customers), one of the steps they recommend is to use tools to detect intrusions and identify compromised systems and that these tool reports on APT (advanced persistent threat) actors using Sogu (also called PlugX) to compromise MSP systems. NCCIC recommends that network defenders use these tools to help [...]

28 Aug 18

Free Report – Export all EDFs (Even Custom Ones!)

2018-08-28T23:57:00+01:00August 28th, 2018|

Hello everyone! It's been a few months since I released a free report, and figured this one may go down well. This report will export all populated EDFs, including checkboxes and dropdowns and format all the data for you in a, hopefully, easy to consume report. Perfect if you are storing things like Bitlocker encryption keys, Local Admin passwords [...]

3 Jul 18

Remote Monitor – Trigger an alert when a profile goes above a certain size, including setup tips for Remote Monitors!

2018-07-03T10:02:00+01:00July 3rd, 2018|

This is a Remote Monitor that can function in Automate, that will trigger certain keywords that can be detected upon if the profile sizes go above a certain size. I have two monitors here, pick whichever you need depending on your requirements. The first will output all profiles and sizes, the second will only output profiles that are over [...]

29 Jun 18

Patch Compliance Report Grouped by Location

2018-06-29T00:08:19+01:00June 29th, 2018|

This again is a report that a number of people have asked for. Unfortunately, to allow the the filtering of a location at the point of report run would require a full rebuild of the report from scratch. I don't have the time to do that, unless someone wants to pay me for it ;) This is the middle [...]

10 May 18

Agent response slow? Tired of waiting to interact with agents? Offline Server alerts flaky? Your heartbeat may be broken!

2018-07-27T16:19:03+01:00May 10th, 2018|

Following a discussion in the LabTechGeek channel, I was surprised to find that a number of people had systems that were not checking in to the Automate server properly. Some of you may know, but there are two types of check-in done by your remote agents: A normal check-in, done over Port 443, numerous things are sent during this [...]

Load More Posts