Powershell Proxy
Powershell proxy
Disable Admin Restriction
reg add HKLM\System\CurrentControlSet\Control\Lsa /t REG_DWORD /v DisableRestrictedAdmin /d 0x0 /f
Constrained Language Mode
Get-AppLockerPolicy -Effective | Select-Xml -XPath "//Rule" | Format-Table -Wrap
Get-AppLockerPolicy -Effective | Out-File "C:\Temp\AppLockerPolicy.xml"
Search for a specfic file
Get-PSDrive -PSProvider FileSystem | ForEach-Object {
Get-ChildItem -Path $_.Root -Filter flag.txt -Recurse -ErrorAction SilentlyContinue
}