Author: Mike Crowley

Public-Scripts Repository

Microsoft retired the TechNet Gallery, so I've re-uploaded a few scripts that were formally posted here: https://social.msdn.microsoft.com/Profile/mike%20crowley

Miscellaneous

• Get-AlternateMailboxes.ps1

  • Query Exchange Online AutoDiscover to enumerate mailbox delegates with modern auth.

• Get-AlternateMailboxes_BasicAuth.ps1

  • Query Exchange Online AutoDiscover to enumerate mailbox delegates. The old basic auth version.

• Graph_SignInActivity_Report.ps1

  • Report on user SignInActivity and license detail via Invoke-RestMethod from Microsoft Graph.

• LowerCaseUPNs.ps1

  • Change Exchange user's email addresses to lowercase.

• MailUser-MgUser-Activity-Report.ps1

  • Get Export login information for mail users via Microsoft Graph.

• MgUserMail.ps1

  • Send email via Microsoft Graph.

• RDPConnectionParser.ps1

  • Extract interactive (local and remote desktop) login information and save to CSV.

• RecipientReportv5.ps1

  • Dump all recipients and their email addresses (proxy addresses) to CSV.

• Restore-FromRecycleBin.ps1

  • Restore files from SPO in bulk.

• Find-DriveItemDuplicates.ps1

  • A utility to find duplicate files on OneDrive for Business or SharePoint Online.

• Compare-ObjectsInVSCode.ps1

  • Compare two PowerShell Objects in Visual Studio Code.

OSINT

• Get-EntraCredentialType.ps1

  • Query Entra for the CredentialType of a user.

• Get-EntraCredentialInfo.ps1

  • Query Entra for the CredentialType and openid-configuration of a user for a combined output.

• Request-AdfsCerts.ps1

  • Remotley query ADFS to see information about the certificates it is using.

• Get-AutoDetect.ps1

  • Query AutoDiscover v2 / and the AutoDetect service (two files).

• Get-ExODomains.ps1

  • Query the domains in a tenant from the Exchange AutoDiscover service.

Gists

There are also a few things over here: https://gist.github.com/Mike-Crowley

• Get-ADSiteByIp.ps1

  • Enter an IP address and this will lookup the AD site to which it belongs.

• Test-AdPassword.ps1

  • Determine if an AD user's password is valid.

• Get-Superscript.ps1

  • Replace a given letter with the superscript letter.

• Get-ShodanIpLookup

  • Query the Shodan database for an IP address with or without an API key

• Get-WordscapesResults.ps1

  • Generate words for the wordscapes game so I can answer faster than my mom.

• Verify-SmbSigning.ps1

  • Makes an SMB connection to a remote server, captures the traffic with Wireshark (tshark), and then parses the capture to report on the use of SMB signing.

Be sure to read the comments in the scripts themselves for more detail!

Visit https://mikecrowley.us/tag/powershell for additional functions and scripts.