24 lines
1.4 KiB
PowerShell
24 lines
1.4 KiB
PowerShell
$ErrorActionPreference='SilentlyContinue'
|
|
'=AV PRODUCTS='
|
|
Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntiVirusProduct | ForEach-Object { "$($_.displayName) state=0x$('{0:x}' -f $_.productState)" }
|
|
'=SECURITY APPS IN INVENTORY='
|
|
Get-Content C:\Windows\Temp\acg-diag1.txt | Select-String 'Bitdefender|Webroot|Sentinel|Sophos|Datto|Huntress|Malwarebytes|Trend|Kaspersky|ESET|McAfee|Norton|Avast|AVG|Security|CCleaner|Defender' | ForEach-Object { $_.Line.Trim() }
|
|
'=NOTIFICATION ALLOWS='
|
|
foreach($b in 'Google\Chrome','Microsoft\Edge'){
|
|
Get-ChildItem "C:\Users\*\AppData\Local\$b\User Data\*\Preferences" | ForEach-Object {
|
|
$who=$_.FullName -replace '^C:\\Users\\([^\\]+).*','$1'
|
|
$prof=$_.Directory.Name
|
|
$j=Get-Content $_.FullName -Raw | ConvertFrom-Json
|
|
$ex=$j.profile.content_settings.exceptions.notifications
|
|
if($ex){ $ex.PSObject.Properties | Where-Object {$_.Value.setting -eq 1} | ForEach-Object { "ALLOW $who ($b $prof) :: $($_.Name)" } }
|
|
}
|
|
}
|
|
'=EXTENSIONS='
|
|
foreach($b in 'Google\Chrome','Microsoft\Edge'){
|
|
Get-ChildItem "C:\Users\*\AppData\Local\$b\User Data\*\Extensions\*" -Directory | ForEach-Object {
|
|
$mf=Get-ChildItem "$($_.FullName)\*\manifest.json" | Select-Object -First 1
|
|
if($mf){ $m=Get-Content $mf.FullName -Raw|ConvertFrom-Json; $nm=$m.name; if($nm -like '__MSG*'){$nm="id:$($_.Name)"}; "$b :: $nm" }
|
|
} | Sort-Object -Unique
|
|
}
|
|
'=DONE STAGE2='
|