Showing posts with label powershell. Show all posts
Showing posts with label powershell. Show all posts

Monday, June 23, 2025

Automated System-Wide Debloating & Basic Software Installation for Windows 10/11

Introducing "DeployWorkstation"

A System-Wide/All-Users Debloating & Basic Application Installation
PowerShell Script For Windows 10 & Windows 11 Systems

Wednesday, April 16, 2025

Suspicious Network & Endpoint Activity Investigation Guide


Suspicious Network & Endpoint Activity Investigation Guide

This guide combines a structured documentation checklist with an actionable toolkit in PowerShell and Python to help rapidly investigate and respod to suspicious activity on a Windows-based endpoint. It includes tutorials for all tools and programs mentioned.

Documentation, Triage/Remediation & Reporting Structure


1. Initial Triage & Observation

Symptoms Observed: 

  • Unexpected outbound connections
  • CPU/disk spikes
  • Unknown open ports
  • Software behaving erratically
  • System slowdown
  • Time & Date Logged
  • System(s) Affected: IP address / Hostname
  • Alert Source Verficication/Review:
    • User report
    • SIEM
    • EDR alert
    • IDS/IPS
    • Valid Security Alert (OS/AV)
    • Etc.

Friday, April 7, 2023

Test Your Laptop Battery (Windows 10, Windows 11)

Easily test your Windows 10 or Windows 11 laptop's battery with a simple command using the built-in Microsoft Windows Powershell!

  1. Open the Windows PowerShell by right-clicking on the Start menu icon and selecting "Windows PowerShell (Admin)" from the menu that appears.
    • A pop-up window may ask for permission to make changes to your device; say yes.
  2. The blue PowerShell command window will appear. 
  3. In the window that opens up, enter:
    powercfg /batteryreport /output "C:\battery-report.html"
  4. Press Enter to run the command.
  5. PowerShell will then tell you the name of the generated battery life report HTML file and where it has been saved on your computer. 
    • It should be located at the root of your C:\ drive.
  6. You can now close the PowerShell window.
  7. Next, open File Explorer and access the C: drive. 
  8. There, you should find the battery life report saved as an HTML file called, "battery-report.html"
  9. Double-click the file to open it in your default web browser.
  10. In the report, find the Design Capacity and Full Charge Capacity of your laptop's battery.
  11. Now, using a calculator on your phone or your computer, divide the Full Charge Capacity by the Design Capacity amounts.
  12. If the result on your calculator is 0.80 or less, it may be time to replace your battery!