@svrooij I had a project once where we needed to create a tool, the #dotnet developer almost started to write it as a standard CLI tool when I showed him a sample project of a #PowerShell #cmdlet with all the built in pluming for input and output handling. I think it was love at first sight for them :dance_cool_doge:

My latest #project is coming to an end, and I’ll be honest, it’s been fun and an interesting piece of work.

Inplementing a Network, Detection and Response (#ndr) platform powered by #bluehexagon (now owned by #qualys) , with full integration into #Sentinel and #defenderforendpoint.

The interesting part was creating a custom #powershell #cmdlet / toolset for security engineering to integrate data as part of security incidents. Had me brushing off my coding skills and remembering how much I actually enjoy it!

This also means, my diary is now free from the end of this month… so am #opentowork.

Check out my #blog at https://paulsanders.co.uk for some (not so much upto date) posts.

#dfir #soc #siem

#TIL that #Microsoft #Powershell makes it really easy to pull information out of their #SQLServer #RDBMS. Using the same #DotNetFramework as people programming in C# and the likes, but in a memory-friendly script interpreter that is installed more easily than #VisualStudio.

Writing data from an image field to a file takes a bit of research. Use the #SetContent #cmdlet: it handles easiest and automatically converts hex to bytes.

Nola egiaztatu konputagailuko erabiltzaile pasahitza Windows domeinuan #PowerShell erabilita http://bit.ly/2NmigSm #ActiveDirectory #PS #Cmdlet