Filip Konopik (Page 2)

Filip Konopik

Sign in Subscribe

PowerShell: Find Application Errors in Event Log

Event Logs & Monitoring

PowerShell: Find Application Errors in Event Log

Need to check for application crashes and errors - for troubleshooting a misbehaving program or general system health checks? This one-liner filters the Application log for the relevant events. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-WinEvent -FilterHashtable @{LogName='Application'; Id=1000,1001}

PowerShell: Export Event Log to CSV

Event Logs & Monitoring

PowerShell: Export Event Log to CSV

Need to export Event Log entries to a CSV file - for sharing with a team, archiving, or analyzing in Excel? This one-liner pulls the events and saves them directly to a file. Prerequisites: * Privileges: None (for System and Application logs; Security log requires Administrator) * Module: Built-in, no import

PowerShell: Find a Specific Event ID in the Event Log

Event Logs & Monitoring

PowerShell: Find a Specific Event ID in the Event Log

Need to search for a specific type of event - a particular error, warning, or system action - without scrolling through the entire log manually? This one-liner filters directly by Event ID. Prerequisites: Prerequisites: * Privileges: None (for System and Application logs; Security log requires Administrator) * Module: Built-in, no import needed

PowerShell: Check Current Windows Defender Threats

Endpoint Security

PowerShell: Check Current Windows Defender Threats

Need to check for currently active or recently detected threats - separate from the full historical log? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-MpThreat Example Output: (no output) An empty result here simply means no active

PowerShell: Check Windows Defender Threat Detection History

Endpoint Security

PowerShell: Check Windows Defender Threat Detection History

Need to check the history of malware detections on a machine - for security auditing or confirming past threats were handled? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-MpThreatDetection Example Output: (no output) An empty result here

PowerShell: Run a Full Windows Defender Scan

Endpoint Security

PowerShell: Run a Full Windows Defender Scan

Need to trigger a full malware scan covering every file on all drives - as part of a script, scheduled task, or thorough manual check? This one-liner starts it directly from the terminal. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Start-MpScan -ScanType FullScan 📦Want all

PowerShell: Run a Quick Windows Defender Scan

Endpoint Security

PowerShell: Run a Quick Windows Defender Scan

Need to trigger a quick malware scan without opening the Windows Security app - as part of a script, scheduled task, or manual check? This one-liner starts it directly from the terminal. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Start-MpScan -ScanType QuickScan 📦Want all of

PowerShell: Check Windows Defender Status

Endpoint Security

PowerShell: Check Windows Defender Status

Need a quick health check on Windows Defender - confirming it's active, up to date, and actually protecting the machine right now? This one-liner pulls the key status indicators straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-MpComputerStatus | Select-Object

PowerShell: Check HVCI (Memory Integrity) Status

Security Hardware

PowerShell: Check HVCI (Memory Integrity) Status

Need to check whether HVCI (Hypervisor-protected Code Integrity, also known as Memory Integrity) is running - a security feature that prevents malicious or unverified code from running in kernel mode? This one-liner checks it directly. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: (Get-CimInstance -ClassName

PowerShell: Check Kernel DMA Protection Status

Security Hardware

PowerShell: Check Kernel DMA Protection Status

Need to check whether Kernel DMA Protection is available - a security feature that blocks unauthorized memory access from external devices like Thunderbolt or USB4 peripherals? This one-liner checks it directly. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\

PowerShell: Get Mouse Information

Peripherals & Power

PowerShell: Get Mouse Information

Need to check what pointing device(s) are connected to a machine - for hardware inventory or troubleshooting an input device issue? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-CimInstance -ClassName Win32_PointingDevice | Select-Object Description, Manufacturer,

PowerShell: Get Keyboard Information

Peripherals & Power

PowerShell: Get Keyboard Information

Need to check what keyboard(s) are connected to a machine - for hardware inventory or troubleshooting an input device issue? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-CimInstance -ClassName Win32_Keyboard | Select-Object Description, Status, NumberOfFunctionKeys

PowerShell: Get Screen Resolution

Peripherals & Power

PowerShell: Get Screen Resolution

Need to check the current screen resolution - for troubleshooting a display issue, confirming a monitor setup, or documentation? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-CimInstance -ClassName Win32_VideoController | Select-object CurrentHorizontalResolution, CurrentVerticalResolution Example Command: CurrentHorizontalResolution

PowerShell: Get Monitor Information

Peripherals & Power

PowerShell: Get Monitor Information

Need to check monitor details - manufacturer, model, and serial number - all at once, for asset tracking or hardware inventory? This script pulls it from the display driver and decodes it into one clean, readable output. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: function Convert-MonitorProperty { param(

PowerShell: Get Monitor Serial Number

Peripherals & Power

PowerShell: Get Monitor Serial Number

Need to check a monitor's serial number - for asset tracking, warranty lookups, or hardware inventory? This one-liner pulls it from the display driver and decodes it into readable text. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: $monitor = Get-CimInstance -Namespace root\wmi -ClassName

PowerShell: Find Successful Login Events in Event Log

Event Logs & Monitoring

PowerShell: Find Successful Login Events in Event Log

Need to check successful login events - for security auditing, confirming when a user last logged in, or building a login history? This one-liner searches the Security log directly for the relevant event. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick Command: Get-WinEvent -FilterHashtable @{LogName=

PowerShell: Find Failed Login Attempts in Event Log

Event Logs & Monitoring

PowerShell: Find Failed Login Attempts in Event Log

Need to check for failed login attempts - for security auditing or investigating a potential brute-force attempt? This one-liner searches the Security log directly for the relevant event. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick Command: Get-WinEvent -FilterHashtable @{LogName='Security'; Id=

PowerShell: Check Secure Boot Status

Security Hardware

PowerShell: Check Secure Boot Status

Need a quick yes/no check for whether Secure Boot is enabled - relevant for Windows 11 compatibility or general firmware security verification? This one-liner reads it straight from the system. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick Command: Confirm-SecureBootUEFI Example Output: True 📦Want

PowerShell: Check Credential Guard Status

Security Hardware

PowerShell: Check Credential Guard Status

Need to check whether Credential Guard is running - to confirm protection against credential theft attacks like Pass-the-Hash? This one-liner checks it directly. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning -contains 1 Example

PowerShell: Check Device Guard / VBS Status

Security Hardware

PowerShell: Check Device Guard / VBS Status

Need to check whether Virtualization Based Security (VBS) - the foundation for Device Guard and Credential Guard - is enabled and running? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard

PowerShell: Get TPM Manufacturer and Firmware Version

Security Hardware

PowerShell: Get TPM Manufacturer and Firmware Version

Need to check who made the TPM chip and what firmware version it's running - for security auditing or firmware update checks? This one-liner pulls it straight from the system. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick Command: Get-CimInstance -Namespace "root/

PowerShell: Check if TPM Is Present

Security Hardware

PowerShell: Check if TPM Is Present

Need a quick yes/no check for whether a machine has a TPM chip - without digging through a full CIM output? This one-liner reads the status directly and clearly. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick Command: Get-Tpm Example Output: TpmPresent : True TpmReady

PowerShell: Check TPM Specification Version

Security Hardware

PowerShell: Check TPM Specification Version

Need to check the TPM specification version - to confirm Windows 11 compatibility or verify a security requirement? This one-liner pulls it straight from the system. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick Command: Get-CimInstance -Namespace "root/CIMV2/Security/MicrosoftTpm" -ClassName Win32_

PowerShell: Check TPM Status

Security Hardware

PowerShell: Check TPM Status

Need to check whether a machine has a TPM (Trusted Platform Module) chip and if it's enabled - relevant for Windows 11 compatibility, BitLocker, or general security configuration? This one-liner pulls it straight from the system. Prerequisites: * Privileges: Run as Administrator * Module: Built-in, no import needed Quick

PowerShell: Get Asset Tag

PowerShell: Get Asset Tag

Need to check a machine's asset tag - for IT inventory tracking or confirming a device is registered in your asset management system? This one-liner pulls it straight from the system. Prerequisites: * Privileges: None * Module: Built-in, no import needed Quick Command: Get-CimInstance -ClassName Win32_SystemEnclosure | Select-