Powershell Proxy

Powershell proxy

Disable Admin Restriction

reg add HKLM\System\CurrentControlSet\Control\Lsa /t REG_DWORD /v DisableRestrictedAdmin /d 0x0 /f

Constrained Language Mode

Get-AppLockerPolicy -Effective | Select-Xml -XPath "//Rule" | Format-Table -Wrap

Get-AppLockerPolicy -Effective | Out-File "C:\Temp\AppLockerPolicy.xml"

Search for a specfic file

Get-PSDrive -PSProvider FileSystem | ForEach-Object {
    Get-ChildItem -Path $_.Root -Filter flag.txt -Recurse -ErrorAction SilentlyContinue
}