Windows Workstation
Checks various registry entries for indicators of a Crypto infection. Also, generates a “honeypot” document, If the document becomes encrypted the script will alarm as well.. Able to report with $CryptoAudit$, $CryptoYES$. Acknowledgments: Many thanks to MarcR, MattK from Kaseya Community for inspiration as posted on http://community.kaseya.com/resources/m/knowexch/86518.aspx#pi5230=2 This script is provided “AS-IS”. Please make sure…
Read MoreA folder of 4 scripts to help secure against a SSL vulnerability known as POODLE. “POODLE Fix” script simply adds the necessary registry entries to block SSLv3. It will report to the agent procedure log if the entries were added successfully. There are 2 keys, one for Server and one for Client that are added.…
Read MoreAlarms when any existing drive falls below 750MB for 5 minutes and re-arms after 8 hours. DISCLAIMER: All Monitor sets should be used as a guideline. Thresholds set, may not be suitable for your exact environment. What works for large clients, may not work for small ones, and vice-versa. Once you assign the monitor…
Read MoreEvent set to monitor the Application log for 866 Warnings when application fails to run because of preventative measures put in place because of CryptoLocker. Assign this event set to Application Log, Warnings to monitor which software is failing to run. (c) Copyright 2013 Network Depot, LLC (dba Virtual Administrator) ALL RIGHTS RESERVED.…
Read MoreScript adds registry keys to Windows 7 and 8 machines to block the deployment of IE 11 also adds registry key to disable auto upgrade of IE 11. Errors out on all other OSes
Read MoreAlarms when any existing drive falls below 750MB for 5 minutes and re-arms after 8 hours. DISCLAIMER: All Monitor sets should be used as a guideline. Thresholds set, may not be suitable for your exact environment. What works for large clients, may not work for small ones, and vice-versa. Once you assign the monitor…
Read MoreScript adds registry keys to disable notifications that AntiSpyWare, AntiVirus, Auto Update, MS Firewall, Internet Settings, UAC are disabled. Script then writes to Agent Procedure Log if successful.
Read MoreScript adds registry key to disable notifications that AntiSpyWare is disabled. Script then writes to Agent Procedure Log if successful.
Read MoreScript adds registry key to disable notifications that AntiVirus is disabled. Script then writes to Agent Procedure Log if successful.
Read MoreScript adds registry key to disable notifications that MS Firewall is disabled. Script then writes to Agent Procedure Log if successful.
Read More