Sets permissions on powershell.exe to allow users to run powershell scripts. This reverses the effect of the Disable Powershell script. Can edit the first line of this script to change the user group if needed.
Sets permissions on powershell.exe to prevent users from running powershell scripts. This will also prevent Kaseya from running powershell commands "as user" as well. Can edit the first line of this script to change the user group if needed.
Procedure to check the endpoints for the mining exploit. Created by Douglas Sanchez (douglas.sanchez@kaseya.com) You MUST create a custom field called “XMR” as documented in Kaseya’s article 1-29-18 Modified by Chris A – Virtual Administrator to add Tags, and reduce un-needed entries Review the following video to build a report off the tags. The tag…
