Skip to content

Instantly share code, notes, and snippets.

View dancwilliams's full-sized avatar
🎪
The Show

Dan C Williams dancwilliams

🎪
The Show
13 followers · 11 following
View GitHub Profile
@dancwilliams
dancwilliams / Triage.ps1
Last active August 21, 2026 00:40
Triage PS1
# Triage.ps1 — read-only Windows endpoint triage. Run as Administrator:
# Set-ExecutionPolicy -Scope Process Bypass -Force; .\Triage.ps1
# Writes everything to Desktop\triage-<host>-<date>\ ; zip that folder and send it over.
$ErrorActionPreference = 'SilentlyContinue'
$out = "$env:USERPROFILE\Desktop\triage-$env:COMPUTERNAME-$(Get-Date -f yyyyMMdd-HHmm)"
New-Item -ItemType Directory -Path $out -Force | Out-Null
function Save($name, $obj) { $obj | Format-List * | Out-String -Width 300 | Set-Content "$out\$name.txt" }
function SaveT($name, $obj) { $obj | Format-Table -AutoSize | Out-String -Width 300 | Set-Content "$out\$name.txt" }
# 1. Live network: every connection/listener with owning process, path, signature
@dancwilliams
dancwilliams / test_urls.txt
Created February 21, 2018 17:23
https://gist.githubusercontent.com/dancwilliams/b6f83155b6ddbf7b35588bbb2f08fda9/raw/96e6a6f581f6b48cd4ac7f046f116d84b42db25d/test1.txt
https://gist.githubusercontent.com/dancwilliams/a5f002460b6faf9418beabd82325680b/raw/d762a8fb5d54f3c79b44e9d67ef2301b8d8e0312/test2.txt
https://gist.githubusercontent.com/dancwilliams/7d6b7ce0f7b10d283ed713941250a9a6/raw/a2d3b4582583fc47eaabefc9056c1950aca197ed/test3.txt
https://gist.githubusercontent.com/dancwilliams/c109235ddc28ccd4a8b5c0bda7d7f251/raw/85a0fbbdc787c7f27f684ac0c464adecd258abcf/test4.txt
@dancwilliams
dancwilliams / test4.txt
Created February 21, 2018 17:20
TEST 4
@dancwilliams
dancwilliams / test3.txt
Created February 21, 2018 17:20
TEST 3
@dancwilliams
dancwilliams / test2.txt
Created February 21, 2018 17:19
TEST 2
@dancwilliams
dancwilliams / test1.txt
Created February 21, 2018 17:19
TEST 1
@dancwilliams
dancwilliams / xrdp.repo
Created February 5, 2018 22:08
xrdp
[xrdp]
name=xrdp
baseurl=http://li.nux.ro/download/nux/dextop/el7/x86_64/
enabled=1
gpgcheck=0
@dancwilliams
dancwilliams / azure_blank_properties.json
Created August 28, 2017 17:12
Azure TEst
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"location": LOCATION,
"parameters": { },
"variables": { },
"resources": [ ],
"outputs": { }
}
@dancwilliams
dancwilliams / VIRL_MGMT_STATIC_DEMO
Created June 15, 2017 20:09
VIRL_MGMT_STATIC_DEMO
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
* education. IOSv is provided as-is and is not supported by Cisco's *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any *
* purposes is expressly prohibited except as otherwise authorized by *
* Cisco in writing. *
**************************************************************************
Router>en
Router#conf t
@dancwilliams
dancwilliams / VIRL_MGMT_CONFIG
Created June 15, 2017 19:58
VIRL_MGMT_CONFIG
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
* education. IOSv is provided as-is and is not supported by Cisco's *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any *
* purposes is expressly prohibited except as otherwise authorized by *
* Cisco in writing. *
**************************************************************************
Router>en
Router#sh ip int bri