Azure Audit Logging Analysis

Note that this requires the customer to have the Unified Audit Logging feature enabled.  This is enabled by default on tenants created after 2020; for those created […]

Public Folder Powershelling Exchange Online

#Find is the PF is mail enabledGet-PublicFolder -Identity “\Public Folder\Folder” -recurse -ResultSize Unlimited | ? { $_.MailEnabled } #Remove mail enabledSet-PublicFolder “\Public Folder\Folder” -MailEnabled:$false -confirm:$False#Delete the Public Folder […]

How to search for Services on a network started by a user

Local PCcmd.exe /c echo . | powershell.exe -ExecutionPolicy Bypass -command “Get-WmiObject win32_service |Where {$_.startname -like ‘*admin*’}”Remote PCcmd.exe /c echo . | powershell.exe -ExecutionPolicy Bypass -command “Get-WmiObject win32_service […]