Skip to main content

Find & Share Worklets

You're looking at the Yellow Pages for Community Worklets... find Worklets and share your own here!

  • 613 Topics
  • 1,794 Replies
613 Topics
ZachF-Automox
ZachF-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Enable Gatekeeper on macOS

Gatekeeper is a built-in security feature of macOS—originally introduced in Mac OS X Lion (10.7.3)—that enforces code signing and verifies downloaded applications before allowing them to run. This worklet ensures that Gatekeeper is always enabled on a macOS system. Evaluation: #!/bin/bash # helper function to check if a command exists function command_exists { type "$1" &> /dev/null } # only evaluate if the spctl command is available if command_exists spctl; then # check if gatekeeper is enabled spctl --status | grep -q "assessments enabled" # yay? or nay? exit $? fi # spctl command not available, move along exit 0 Remediation: #!/bin/bash # enable gatekeeper for all users spctl --master-enable # did we succeed? exit $?

551
ChristianB
5 years ago
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Installing Carbon Black on MacOS

Hey Y’all As an IT administrator one of the first things you’ll find yourself doing is installing an endpoint security tool, which can be very difficult to automate across hundreds, if not thousands of devices. Not with Automox. Automox Worklets gives you the power to deploy endpoint security tools to newly added endpoints as well as enforce installation on existing devices, so you always know that your endpoints are running the security tools necessary to protect your IT environment. The below Worklet is designed to deploy Carbon Black Defense to macOS endpoints. The instructions include creating and deploying a .zip files that contains the install .sh script as well as the .pkg required by the .sh to perform the install. If everything works as designed, you should be able to run the Worklet and see the endpoint(s) appear in the Cb console. You need to make sure that the Carbon Black application is whitelisted for the devices so the KEXT does not prevent the installation. Otherw

2600
AdamW-Automox
5 years ago
ChristianB
ChristianBFormer Automox Employee
posted in Find & Share Worklets
Worklet: (macOS) enforce password policy for all users and not for exempt users

Here is a worklet for enforcing password policies for macOS for all users (as well as setting exempt users). This code is test on macOS mojave. The defaults are provided for example only. Check script. #!/usr/bin/env bash set -e -o pipefail ###################################################################### # Enforcing a password policy is good practice for all users # Using the variables below you can check the password policy for all # logged in users. # the default variables provided in the main clause are provided for EXAMPLE ONLY ###################################################################### ###################################################################### # get_logged_in_users # Retrieves the logged in users. Does deduplication to make sure that we only # apply policies to # # Note: if there are service users it will find them too # # Globals: # # Arguments: # None # Returns: # A space delimited string of unique users logged in #########################

2200
ChristianB
5 years ago
JasonG-Automox
JasonG-AutomoxNovice
posted in Find & Share Worklets
Less intense resetting of the Windows Update client

The Invoke-TroubleshootingPack cmdlet runs a troubleshooting pack in either interactive or unattended mode. A troubleshooting pack determines the root causes of issues, resolves the issues, and verifies that the issues were resolved. Eval If (Test-Path "$env:allusersprofile\SoftwareDistribution") { Exit 0 } Else { Exit 1 } Remediatrion #Stripped down very low level reset of windows update components Get-TroubleshootingPack -Path $env:systemroot\diagnostics\system\WindowsUpdate | Invoke-TroubleshootingPack -Unattended

660
JasonG-Automox
5 years ago
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Uninstalling Applications on MacOS

Hey Y’all! IT Admins often find themselves having to uninstall certain softwares off their macOS devices they manage. This can be a very daunting, time consuming task, especially if you are managing 1000’s of devices that span across several different subnets in different geographic locations. Also, if zero-day vulnerabilities are found to be exploited through one of these applications the speed at which they are uninstalled could mean the difference between you being exploited by an attacker or not. With Automox Worklets we make this task effortless, and remediated within seconds, even across 1000’s of devices in different locations all in the cloud from a single pane of glass. The Worklet example below is designed to evaluate if an applications you specify exists on you macOS devices and uninstall them. Evaluation: #!/bin/bash #The evaluation piece of this worklet is designed to identifying if an application exists on a device. #Designate the application you wish to remove fro

2095
AdamW-Automox
5 years ago
ZachF-Automox
ZachF-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Auto-Update Stale Docker Containers

Keeping running Docker containers up-to-date is a challenge that can become pretty unwieldy as the amount of infrastructure you manage grows. Thanks to Watchtower, a Docker image that can update other Docker images in a system, updates can be handled in a safe and—more importantly—scalable way. This worklet will check for any Docker running containers on an endpoint with available updates and, if the container has the com.centurylinklabs.watchtower.enable label set to true, will mark those containers for update. Evaluation: #!/bin/bash # helper function to check if a command exists function command_exists { type "$1" &> /dev/null } # only evaluate if docker is available if command_exists docker; then # check for docker containers with available updates # # NOTE: this check only applies to containers where # the com.centurylinklabs.watchtower.enable label # is set to "true" docker run --rm -v /var/run/docker.sock:/var/run/docker.sock cont

1120
ZachF-Automox
5 years ago
ZachF-Automox
ZachF-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Enable Firewall on macOS

Originally introduced in Mac OS X Leopard (10.5.1), the built-in macOS Firewall limits incoming connections on a per-application basis (as opposed to a per-port basis). Disabled by default, this worklet enables the macOS firewall. Evaluation: #!/bin/bash # helper function to check if a command exists function command_exists { type "$1" &> /dev/null } # only evaluate if the socketfilterfw command is available if command_exists /usr/libexec/ApplicationFirewall/socketfilterfw; then # check if the firewall is enabled /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate | grep -q 'enabled' # yes? no? exit $? fi # socketfilterfw command is not available, move along exit 0 Remediation: #!/bin/bash # turn the firewall on /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on # how did we do? exit $?

1070
ZachF-Automox
5 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Install Discord client on Mac

This worklet will check to see if Discord is installed and if it isn’t, will download and install it. See this KB article for how to setup a worklet:  https://help.automox.com/hc/en-us/articles/5603324231700-Creating-a-Worklet Evaluation Code:  #!/bin/bashif [ -d "/Applications/Discord.app" ]; then exit 0else exit 1fi Remediation Code:  #!/bin/bashecho -e "Downloading Discord..."curl -L -o "/tmp/Discord.dmg" https://discordapp.com/api/download?platform=osxecho -e "Installing Discord..."hdiutil attach "/tmp/Discord.dmg" -nobrowseditto "/Volumes/Discord/Discord.app" "/Applications/Discord.app"echo -e "Cleaning up..."hdiutil detach "/Volumes/Discord"rm -f "/tmp/Discord.dmg"

790
Nic-Automox
5 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Install Dashlane client on Mac

This worklet will check to see if Dashlane is installed and if it isn’t, will download and install it. See this KB article for how to setup a worklet:  https://help.automox.com/hc/en-us/articles/5603324231700-Creating-a-Worklet Evaluation Code:  #!/bin/bashif [ -d "/Applications/Dashlane.app" ]; then exit 0else exit 1fi Remediation Code:  #!/bin/bashecho -e "Downloading Dashlane..."curl -L -o "/tmp/Dashlane.dmg" https://www.dashlane.com/directdownload?platform=macecho -e "Installing Dashlane..."hdiutil attach "/tmp/Dashlane.dmg" -nobrowseditto "/Volumes/Dashlane/Dashlane.app" "/Applications/Dashlane.app"echo -e "Cleaning up..."hdiutil detach "/Volumes/Dashlane"rm -f "/tmp/Dashlane.dmg"

480
Nic-Automox
5 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
What worklets would you like to see?

I’m looking to create a list of worklet ideas to start implementing. What sorts of things would you like to see in the Worklets category? What problems around patching and automation are you looking to solve? No idea is too big or too small!

11910
Nic-Automox
5 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Legal Acknowledgement at Login

This Worklet will let you set a title and message for your users when they login. This can be used as a required legal acceptance of your AUP, or for a critical notification that all users need to see. To remove the security message, edit your script to check for a blank caption and set them both to blank strings. To deploy this endpoint hardening worklet, do the following: Log in to your Automox Console. Browse to the System Management page and click Create Policy . Choose Windows under Worklet. 51%20PM913×682 52 KB Insert the Evaluation and Remediation Code scripts. The evaluation code keeps you apprised of each device’s ongoing compliance, as well as flags the device for remediation. The remediation code enforces this setting on the schedule you define. • Under Evaluation Code: # Define Registry Key and sub-value to evaluate ############################################# $regPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" $regPropertyText = "Legal

730
Nic-Automox
5 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Video: How to install a worklet

Check out this video that walks you through the process: https://patch.automox.com/video-automox-product-feature-overview-creating-worklets  

450
Nic-Automox
5 years ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: XP Patching

This manual process for deploying an emergency patch will decrease the time it takes to ensure your legacy machines are operating at lower risk to exploit. Note: Automox cannot fully update Windows XP versions due to the lack of support for XP updates by Windows Update. Automox can manage software installation and patching, as well as configuration and security settings. There are 2 minimum requirements that can allow Automox to run on Windows XP: Microsoft .NET Framework 3.5 or higher Windows PowerShell 2.0 or higher Windows XP Required Prerequisites Install .NET Framework 3.5 (or higher) https://www.microsoft.com/en-us/download/details.aspx?id=21 Install PowerShell 2.0 via Windows Management Framework (.NET required first) https://www.microsoft.com/en-us/download/details.aspx?id=16818 Install Automox (with legacy Installer) https://console.automox.com/Automox_Legacy_Installer-latest.msi (Note: GetSystemDetail scan command WILL NOT work, so there are no hardware details and the comp

1190
Nic-Automox
5 years ago
Terms & ConditionsCookie settings