Lessons Learned from Using Azure Automation with PowerShell Scripts
By: Tony Redmond

I've spent some time investigating Azure Automation PowerShell recently. In this article, I discuss three learnings that might be of interest to others. Debugging, cost, and tracking the use of Azure Automation PowerShell might not interest everyone, but they've certainly helped me to understand how the platform works.
Link

Write great AWS Lambda PowerShell functions
By: Alex Neihaus

In this post, I share some tips I use when I write AWS Lambda PowerShell functions. You can find lots of help writing .Net end user functions for Lambda. By end user, I mean things that are part of an application system, like kicking off Glue jobs, working with Redshift and so on.
Link

PSTimesheets
By: Shane O'Neill

Read, parse, and aggregate timesheet files
Link

Today's cmdlet ‣ Remove-Item
Deletes the specified items.

Example's Remarks:
• In the `Get-ChildItem` command, Path has a value of (`*`), which represents the contents of the current folder.
• It uses Include to specify the CSV file type, and it uses Recurse to make the retrieval recursive.
• If you try to specify the file type the path, such as `-Path *.csv`, the cmdlet interprets the subject of the search to be a file that has no child items, and Recurse fails.

#tutorial

Invoke-AKSH and easily manage your local lab
By: Uday Mittal

Having worked on AKSH (my Discord bot) and witnessing how easy it made deploying and managing a lab on AWS, I wanted something similar for my local lab as well. On my local machines I use VMWare Workstation to create and manage virtual labs. Even though it has an intuitive GUI, it lacks a mechanism to perform actions (start, stop, snapshot, revert etc.) on multiple virtual machines via single click (maybe that's where vSphere comes in!). However, to compensate for that, it exposes a command line interface (vmrun.exe) that can aid in automating actions on multiple virtual machines.
Link

Hackers use new stealthy PowerShell backdoor to target 60+ victims
By: Bill Toulas

A previously undocumented, fully undetectable PowerShell backdoor is being actively used by a threat actor who has targeted at least 69 entities.
Link

Reporting Teams Channel Email Addresses
By: Tony Redmond

No Microsoft 365 admin portal will tell you about the set of email addresses assigned to Teams channels. Fortunately, it's relatively easy to create a report with PowerShell and just a little Graph magic.
Link

5 Ways to install PowerShell 7 on Windows
By: Patrick Gruenauer

PowerShell 7 is the successor to PowerShell 5.1. It's fast, reliable and it is cross-platform. Without a doubt, PowerShell 7 is the future.
Link

Using PowerShell to Manage Azure AD Custom Security Attributes
By: Tony Redmond

Azure AD custom security attributes can mark user and service principal objects for special processing, which is how the app filter for conditional access policies works. It's nice to be able to interact with data through PowerShell and the Microsoft Graph PowerShell SDK cmdlets support setting, updating, and retrieval of Azure AD custom security attributes. Everything works, but it's a pity that it's a little clunky.
Link

Optimizing Visual Studio Code for Powershell Development by Justin Grote – YouTube
By: Justin Grote

I’ve used VSCode as my primary Powershell environment for over 3 years and have tried a lot of extensions and settings, and now is your turn to learn from my experience! Here are some examples of items we will cover:
Link

Today's cmdlet ‣ Get-WinEvent
Gets events from event logs and event tracing log files on local and remote computers.

Example's Remarks:
• The `Get-WinEvent` cmdlet gets log information from the computer.
• The ListProvider parameter specifies the provider, Microsoft-Windows-GroupPolicy .
• The expression is wrapped in parentheses and uses the Events property to get objects.
• The objects are sent down the pipeline to the `Format-Table` cmdlet.
• `Format-Table` displays the Id and Denoscription of the event objects.

#tutorial

Introduction to the Microsoft Graph PowerShell SDK Part II: Performing Common User and Group Operations
By: Sean McAvinue

This article dives deep into using the SDK to perform common day-to-day tasks to manage users and groups through the Graph. Be on the look out for the next part of this series!
Link

Today's tip ‣ Types: Value types

”The switch type is used to constrain the type of a parameter in a command. If an argument having the corresponding parameter name is present the parameter tests $true; otherwise, it tests `$false`. In PowerShell, `switch` maps to `System.Management.Automation.SwitchParameter`.”

#tip

How to Use Microsoft PowerShell Core on Linux Virtual Machines
By: Brien Posey

PowerShell was designed as a Windows management tool, but Microsoft has created cross-platform versions of PowerShell. That way, you can use a standard command line interface to manage a variety of system types. This article explains how to install PowerShell on a Linux virtual machine as well as the differences between PowerShell and PowerShell Core.
Link

Today's cmdlet ‣ Get-WinEvent
Gets events from event logs and event tracing log files on local and remote computers.

Example's Remarks:
• The `Get-Date` cmdlet uses the AddDays method to get a date that is seven days before the current date.
• The date object is stored in the `$StartTime` variable.

#tutorial

A WPF Countdown Timer
By: Jeffery Hicks

Last year I released a PowerShell module called PSClock. The module contains a command to create a transparent WPF form displaying a clock. Shortly after, someone posted a request for a countdown timer. Not an unreasonable request and one I finally got around to implementing.
Link

Enable Microsoft Sentinel Analytics Rules at Scale
By: Charbel Nemnom

Microsoft Sentinel comes with analytics rule built-in templates that you can turn into active rules by effectively creating a copy of them - that's what happens when you create a rule from a template.
Link

Audit Events in Your Azure Subnoscription with PowerShell
By: Trevor Jones

Update! v.1.1 released fixing a bug where the most recent events were not being returned (2022-09-13) A quick post - I just published a new noscript for retrieving activity log events for an Azure subnoscription as the current options for searching and retrieving events didn't satisfy me.
Link

Today's cmdlet ‣ Compress-Archive
Creates a compressed archive, or zipped file, from specified files and directories.

Example's Remarks:
• The Path parameter accepts specific file names and file names with wildcards, `*.vsd`.
• The Path uses a comma-separated list to get files from different directories.
• The compression level is Fastest to reduce processing time.
• The DestinationPath parameter specifies the location for the `Draft.zip` file.
• The `Draft.zip` file contains `Draftdoc.docx` and all the files with a `.vsd` extension.

#tutorial

PowerShell Secrets Management – Part 4: Backup/Export/Migrate Secrets
By: Roman Stadlmair

The PowerShell Secrets Management Module became one of my must-haves on every computer i use with PowerShell. I already wrote a couple of posts about it. First Look into the beta module 1-Introduction 2-Installation and first steps 3-Use secrets in noscripts Recently i tested a Macbooc Air M1 and wanted to use the secrets i had on my main Windows machine. The approac was to simply generate a CSV-file from the secrets and import it on the Mac. As a reminder, lets summarize what Secrets Managemt Architecture is about. Secrets are stored in Vaults Secrets may occur in the form
Link

HTML Reporting with Powershell Part 1 Creating the Basic Report
By: Chasse TAC

In tis video, we look at how to create an html report in powershell. This will shows the basics of how to create a multiple fragment body and why it's needed for more complex reports.
Link