662 discussions
This worklet can be used to remediate vulnerability found by Rapid7 -Weak LAN Manager hashing permitted. We do it by adding a value in registry. Evaluation Code: Exit 1 Remediation Code $path =...
I created this simple worklet to deploy the Local Administrator Password Solution client to machines and create the local administrative user we are going to use. Please disable the default local...
Simple worklet to remove all java versions and write back in activity log. Worklet is maintained on our github page: https://github.com/Dutch-Technology-eXperts/Automox/blob/main/remove_java.ps1...
This is a very basic method of setting up an L2TP VPN using a worklet. Change the values: vpnName, serverAddress, yourPsk, authMethod Evaluation Code: Get-VpnConnection -Name "vpnName" Remediation...
UPDATE: January 8, 2021 Windows 10 Feature Updates can be finalized by using the Automox Reboot process. All Feature Update versions released to date are supported. As older versions of Windows 10...
This worklet downloads the latest version of the Malwarebytes Support Tool and runs it on the system to uninstall Malwarebytes. If you want to save the tool to a directory other than C:\Temp, modify...
This Worklet will reboot the computer using Scheduled Task running as System account. Evaluation code: (returns exit code of 1 so that the policy will always run the remediation code when scheduled)...
Since the beginning of time we see java being installed by default. With the changing license structure of Oracle and the monthly increase in java vulnerabilities it is time to reduce the java...
Is it necessary to have an “evaluation” on the worklet? I just want to use the remediation portion to push a Powershell script to uninstall an application. Something like this. $application1 =...
Hey guys, just need some assistance finalising the Java worklet. The automatic patching seems to have uninstalled Java from a fair few machines so need to resolve. It works fine running from the...
The insight agent from Rapid7 insightIDR and InsightOPS supports advanced configuration features which can be configured by placing a logging.json file in the config folder of the agent. Distribution...
This worklet takes two configurations that you upload to the worklet - eventlogs.yaml & default_agent_config.yaml - and copies them to the Datadog folders they belong to as conf.yaml and datadog.yaml...
Download the version of Notepad++ you want to install, upload it to the worklet, and set $saveFile in the remediation to match the name of the file you upload. Evaluation: <# .SYNOPSIS This Test...
Hi everyone We sometimes have a requirement to replicate the behaviour of GPOs that run in the user context. This means you need to execute a task under the current logged on user and trigger it to...
Displays a balloon tip from the task tray for about 8 seconds for currently logged in user. Would invite anyone to help me get this code further! Worklet does use a custom icon file that I include as...
Howdy! Here is a worklet to detect and disable weak and vulnerable algorithms in the sshd service. These algorithms are usually kept enabled for compatibility reasons but they’re usually safe to...
Installing the Arctic Wolf Agent Recently we had to go about deploying an agent from a managed SOC called “Arctic Wolf” to all of our server endpoints. The trouble is, the MSI file had to be in the...
If anyone else is in the same boat of wanting to remove Microsoft System Center Configuration Manager agents from endpoints and servers this is the worklet we used to accomplish it. Evaluation script...
Hi all Are you guys seeing a sudden spike of Emotet related spam mails arriving? The org I’m working in is seeing this. They arrive from compromised email accounts. The email messages are hijacked...
There a various topics on this community about resetting windows updates to its default settings. The attached worklet is similair to others posted but it can be run without a reboot. So far we have...