Find & Share Worklets

Hey Y’all! IT Admins often find themselves having to uninstall certain softwares off their macOS devices they manage. This can be a very daunting, time consuming task, especially if you are managing 1000’s of devices that span across several different subnets in different geographic locations. Also, if zero-day vulnerabilities are found to be exploited through one of these applications the speed at which they are uninstalled could mean the difference between you being exploited by an attacker or not. With Automox Worklets we make this task effortless, and remediated within seconds, even across 1000’s of devices in different locations all in the cloud from a single pane of glass. The Worklet example below is designed to evaluate if an applications you specify exists on you macOS devices and uninstall them. Evaluation: #!/bin/bash #The evaluation piece of this worklet is designed to identifying if an application exists on a device. #Designate the application you wish to remove fro

Keeping running Docker containers up-to-date is a challenge that can become pretty unwieldy as the amount of infrastructure you manage grows. Thanks to Watchtower, a Docker image that can update other Docker images in a system, updates can be handled in a safe and—more importantly—scalable way. This worklet will check for any Docker running containers on an endpoint with available updates and, if the container has the com.centurylinklabs.watchtower.enable label set to true, will mark those containers for update. Evaluation: #!/bin/bash # helper function to check if a command exists function command_exists { type "$1" &> /dev/null } # only evaluate if docker is available if command_exists docker; then # check for docker containers with available updates # # NOTE: this check only applies to containers where # the com.centurylinklabs.watchtower.enable label # is set to "true" docker run --rm -v /var/run/docker.sock:/var/run/docker.sock cont

Originally introduced in Mac OS X Leopard (10.5.1), the built-in macOS Firewall limits incoming connections on a per-application basis (as opposed to a per-port basis). Disabled by default, this worklet enables the macOS firewall. Evaluation: #!/bin/bash # helper function to check if a command exists function command_exists { type "$1" &> /dev/null } # only evaluate if the socketfilterfw command is available if command_exists /usr/libexec/ApplicationFirewall/socketfilterfw; then # check if the firewall is enabled /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate | grep -q 'enabled' # yes? no? exit $? fi # socketfilterfw command is not available, move along exit 0 Remediation: #!/bin/bash # turn the firewall on /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on # how did we do? exit $?

This worklet will check to see if Discord is installed and if it isn’t, will download and install it. See this KB article for how to setup a worklet:  https://help.automox.com/hc/en-us/articles/5603324231700-Creating-a-Worklet Evaluation Code:  #!/bin/bashif [ -d "/Applications/Discord.app" ]; then exit 0else exit 1fi Remediation Code:  #!/bin/bashecho -e "Downloading Discord..."curl -L -o "/tmp/Discord.dmg" https://discordapp.com/api/download?platform=osxecho -e "Installing Discord..."hdiutil attach "/tmp/Discord.dmg" -nobrowseditto "/Volumes/Discord/Discord.app" "/Applications/Discord.app"echo -e "Cleaning up..."hdiutil detach "/Volumes/Discord"rm -f "/tmp/Discord.dmg"

This worklet will check to see if Dashlane is installed and if it isn’t, will download and install it. See this KB article for how to setup a worklet:  https://help.automox.com/hc/en-us/articles/5603324231700-Creating-a-Worklet Evaluation Code:  #!/bin/bashif [ -d "/Applications/Dashlane.app" ]; then exit 0else exit 1fi Remediation Code:  #!/bin/bashecho -e "Downloading Dashlane..."curl -L -o "/tmp/Dashlane.dmg" https://www.dashlane.com/directdownload?platform=macecho -e "Installing Dashlane..."hdiutil attach "/tmp/Dashlane.dmg" -nobrowseditto "/Volumes/Dashlane/Dashlane.app" "/Applications/Dashlane.app"echo -e "Cleaning up..."hdiutil detach "/Volumes/Dashlane"rm -f "/tmp/Dashlane.dmg"

I’m looking to create a list of worklet ideas to start implementing. What sorts of things would you like to see in the Worklets category? What problems around patching and automation are you looking to solve? No idea is too big or too small!

This Worklet will let you set a title and message for your users when they login. This can be used as a required legal acceptance of your AUP, or for a critical notification that all users need to see. To remove the security message, edit your script to check for a blank caption and set them both to blank strings. To deploy this endpoint hardening worklet, do the following: Log in to your Automox Console. Browse to the System Management page and click Create Policy . Choose Windows under Worklet. 51%20PM913×682 52 KB Insert the Evaluation and Remediation Code scripts. The evaluation code keeps you apprised of each device’s ongoing compliance, as well as flags the device for remediation. The remediation code enforces this setting on the schedule you define. • Under Evaluation Code: # Define Registry Key and sub-value to evaluate ############################################# $regPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" $regPropertyText = "Legal

Check out this video that walks you through the process: https://patch.automox.com/video-automox-product-feature-overview-creating-worklets  

This manual process for deploying an emergency patch will decrease the time it takes to ensure your legacy machines are operating at lower risk to exploit. Note: Automox cannot fully update Windows XP versions due to the lack of support for XP updates by Windows Update. Automox can manage software installation and patching, as well as configuration and security settings. There are 2 minimum requirements that can allow Automox to run on Windows XP: Microsoft .NET Framework 3.5 or higher Windows PowerShell 2.0 or higher Windows XP Required Prerequisites Install .NET Framework 3.5 (or higher) https://www.microsoft.com/en-us/download/details.aspx?id=21 Install PowerShell 2.0 via Windows Management Framework (.NET required first) https://www.microsoft.com/en-us/download/details.aspx?id=16818 Install Automox (with legacy Installer) https://console.automox.com/Automox_Legacy_Installer-latest.msi (Note: GetSystemDetail scan command WILL NOT work, so there are no hardware details and the comp