Slackbot
06/29/2022, 11:09 AMWebster Webster
06/29/2022, 11:13 AMJames Rankin
06/29/2022, 11:16 AMWebster Webster
06/29/2022, 11:20 AMWebster Webster
06/29/2022, 11:22 AMcmd.exe, powershell.exe, and wsl.exe, to the App monitoring list by default.James Rankin
06/29/2022, 11:22 AMWebster Webster
06/29/2022, 11:23 AMRay Davis
06/29/2022, 11:32 AMJames Rankin
06/29/2022, 11:34 AMRay Davis
06/29/2022, 11:38 AMJames Rankin
06/29/2022, 11:41 AMJames Rankin
06/29/2022, 11:41 AMLeee Jeffries
06/29/2022, 12:03 PMJames Rankin
06/29/2022, 12:04 PMRay Davis
06/29/2022, 12:05 PMLeee Jeffries
06/29/2022, 12:06 PMJames Rankin
06/29/2022, 12:06 PMLeee Jeffries
06/29/2022, 12:07 PMRay Davis
06/29/2022, 12:11 PMJames Rankin
06/29/2022, 12:20 PMLeee Jeffries
06/29/2022, 12:43 PMJames Rankin
06/29/2022, 12:45 PMLeee Jeffries
06/29/2022, 12:47 PMLeee Jeffries
06/29/2022, 12:48 PMlangsbr
06/30/2022, 12:05 AMHal Lange
06/30/2022, 2:38 AMHal Lange
06/30/2022, 6:55 PM$DBServer = "<Enter SQL Server>"
$DBName = "<Enter DB Name>"
function GetInfo($QSQL,$DB,$DBS){
$Connect = "Provider=SQLNCLI11.1;Integrated Security=SSPI;Persist Security Info=False;Initial Catalog=$DB;Data Source=$DBS"
Try{
$sqlConnection = New-Object System.Data.OleDb.OleDBConnection $Connect
$command = New-Object System.Data.OleDb.OleDbCommand $QSQL,$Connect
$sqlConnection.Open()
$dataAdapter = New-Object System.Data.OleDb.OleDbDataAdapter $Command
$dataset = New-Object System.Data.DataSet
$dataAdapter.Fill($dataSet)
$sqlConnection.Close()
Foreach ($Table in $Dataset.Tables){
if ($Table -ne $Null){
write-host Copying Files
foreach ($Row in $Table){
$FileName = $Row.FilePath
write-host $FileName
Copy-Item -path $FileName -Destination "$desktoppath\Videos\"
}
}
}
}
catch{
[string]$ErrorText = $Error[0].CategoryInfo.Reason
Write-Warning $ErrorText
}
}
cls
$DesktopPath = [System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::Desktop)
if (test-path "$DesktopPath\Videos"){remove-item "$DesktopPath\Videos" -recurse -force}
write-host ""
write-host "Default is (U)ser Search"
$ClientorUser = Read-Host -prompt "Search for (C)lient or (U)ser? "
if ($ClientorUser -match "c"){
$NameSearch = Read-Host -Prompt "ClientName to search for"
$strTable = "Client"
} else {
$NameSearch = Read-Host -Prompt "UserID to search for"
$strTable = "UserAccount"
}
write-host ""
$days = Read-Host -Prompt "How many days to search"
$days = -1 * $days
$Query = "Select
[$strTable].Name,
[ICLFile].FilePath,
[ICLFile].LoginTime
From [ICLFile] Inner Join [$strTable] on [ICLFile].$($strTable)ID = [$strTable].ID
where [$strTable].Name like '$NameSearch' and LoginTime >= dateadd(day,$days,GetUTCDate())"
md "$DesktopPath\Videos"
Write-host "Checking $DBName on $DBServer"
GetInfo $Query $DBName $DBServer
pause