Daily.ps1
<#PSScriptInfo .VERSION 1.0 .GUID c352554e-faf3-4cd0-9042-30564c4799fb .AUTHOR jmcarthur@roundrocktexas.gov .COMPANYNAME .COPYRIGHT .TAGS .LICENSEURI .PROJECTURI .ICONURI .EXTERNALMODULEDEPENDENCIES .REQUIREDSCRIPTS .EXTERNALSCRIPTDEPENDENCIES .RELEASENOTES #> #Requires -Module PSWinReportingV2 #Requires -Module Dashimo <# .DESCRIPTION Generates AD dashboard for current day #> Param() Import-Module Dashimo # Install-Module Dashimo -Force Import-Module PSWinReportingV2 # Install-Module PSWinReportingV2 -Force $Reports = @( 'ADUserChanges' 'ADUserChangesDetailed' 'ADComputerChangesDetailed' 'ADUserStatus' 'ADUserLockouts' #ADUserLogon 'ADUserUnlocked' 'ADComputerCreatedChanged' 'ADComputerDeleted' #'ADUserLogonKerberos' 'ADGroupMembershipChanges' 'ADGroupEnumeration' 'ADGroupChanges' 'ADGroupCreateDelete' 'ADGroupChangesDetailed' 'ADGroupPolicyChanges' 'ADLogsClearedSecurity' 'ADLogsClearedOther' #ADEventsReboots ) $Events = Find-Events -Report $Reports -DatesRange CurrentDay -DetectDC -Verbose Dashboard -FilePath $PSScriptRoot\DashboardFromEvents.html -Name 'FindEvents - Daily' -Show { Tab -Name 'Computer Changes' { Section -Name 'ADComputerCreatedChanged' { Table -DataTable $Events.ADComputerCreatedChanged } Section -Name 'ADComputerDeleted' { Table -DataTable $Events.ADComputerDeleted } Section -Name 'ADComputerChangesDetailed' { Table -DataTable $Events.ADComputerChangesDetailed } } Tab -Name 'Group Changes' { Section -Name 'ADGroupCreateDelete' { Table -DataTable $Events.ADGroupCreateDelete } Section -Name 'ADGroupMembershipChanges' { Table -DataTable $Events.ADGroupMembershipChanges } Section -Name 'ADGroupEnumeration' { Table -DataTable $Events.ADGroupEnumeration } Section -Name 'ADGroupChanges' { Table -DataTable $Events.ADGroupChanges } Section -Name 'ADGroupChangesDetailed' { Table -DataTable $Events.ADGroupChangesDetailed } } Tab -Name 'User Changes' { Section -Name 'ADUserChanges' { Table -DataTable $Events.ADUserChanges } Section -Name 'ADUserChangesDetailed' { Table -DataTable $Events.ADUserChangesDetailed } Section -Name 'ADUserLockouts' { Table -DataTable $Events.ADUserLockouts } Section -Name 'ADUserStatus' { Table -DataTable $Events.ADUserStatus } Section -Name 'ADUserUnlocked' { Table -DataTable $Events.ADUserUnlocked } } Tab -Name 'Group Policy Changes' { Section -Name 'ADGroupPolicyChanges' { Table -DataTable $Events.ADGroupPolicyChanges } } Tab -Name 'Logs' { Section -Name 'ADLogsClearedOther' { Table -DataTable $Events.ADLogsClearedOther } Section -Name 'ADLogsClearedSecurity' { Table -DataTable $Events.ADLogsClearedSecurity } } } |