readme.md

Queries

Note: The scripts must be stored in a folder named _QUERY_ to use them as queries
The use of some scripts requires the PowerShell Module NetTcpIp.

• QRY_Get-SysMAppPackages.ps1

  Gets a list of the app packages

• QRY_Get-SysMDNSInterfaceAliases.ps1

  Retrieves DNS interface aliases

• QRY_Get-SysMEventLogs.ps1

  Retrieves the event logs on the computer

• QRY_Get-SysMEventLogSources.ps1

  Retrieves the sources from an event log

• QRY_Get-SysMFirewallRules.ps1

  Retrieves firewall rules from the target computer

• QRY_Get-SysMIPMInterfaceAliases.ps1

  Retrieves the IP address interface aliases

• QRY_Get-SysMKeyProtectors.ps1

  Retrieves the BitLocker key protectors on the computer

• QRY_Get-SysMLocalGroups.ps1

  Gets the security IDs from local security groups

• QRY_Get-SysMLocalUsers.ps1

  Gets security IDs from local user accounts

• QRY_Get-SysMKeyProcesses.ps1

  Gets all processes that are running on the local computer or a remote computer

• QRY_Get-SysMRDUserSessions.ps1

  Gets the user remote sessions on the computer

• QRY_Get-SysMRestorePoints.ps1

  Gets the restore points on the computer

• QRY_Get-SysMScheduledTasks.ps1

  Retrieves the scheduled tasks that is registered on the computer

• QRY_Get-SysMServices.ps1

  Gets all services on a computer

• QRY_Get-SysMTimeZones.ps1

  Gets the list of available time zones

• QRY_Get-SysMUserProfiles.ps1

  Lists the Active Directory user profiles on the computer

• QRY_Get-SysMWBBackupSets.ps1

  Gets backups for a server from a location that you specify