Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Atif

Pages: [1]
1
General LabTech / Re: DRV-Free Space Remaininng <10 %
« on: October 23, 2015, 04:28:54 PM »
Not very confident with Monitors yet but try this if it's only for one agent:

Clients > Client > Site > Right click on the Server/Computer > Monitors > Add New Monitor

I personally don't like using Wizard, you can press No

Rest is all per choice

Good luck. Share the results

2
Script Exchange / Re: Cryptolocker Detection
« on: October 22, 2015, 12:21:51 PM »
Atif, Have you tried this yet!

Not yet. Just putting down a possible way to achieve it.

Worth trying though for a POC.

3
Script Exchange / Re: Cryptolocker Detection
« on: October 22, 2015, 12:18:07 PM »
Quote
You wouldn't need to do step 2 and 3 as seperate scripts. You could use the 'shell' command in LabTech scripting to run the export.

That's exactly right. That's why I used script action - I meant a Shell command

4
Script Exchange / Re: Cryptolocker Detection
« on: October 22, 2015, 11:54:47 AM »
One way I was thinking to achieve this is by using Everything software (http://www.voidtools.com)

Everything creates a real-time index of complete filesystem

Then schedule a script every five or so minutes that would find the file name containing *.encrypted in the index file created by Everything and raise alert

The only problem I see is that the index file created by Everything is rather a .db file (SQLite file) and not plaintext which again can be overcome by using SQLite Export application (http://www.speqmath.com/tutorials/sqlite_export/) to export the .db to .txt/.csv

Summary:
  • Run Everything as a Service on a computer
  • Schedule a script to export Everything index file .db to .txt/.csv after every 5 minutes (using SQLite Export command line tool)
  • Once step 2 is done, add another script action in the end to find *.encrypted within the exported .txt/.csv
  • Raise alert

5
General LabTech / Re: This Script is Running so it cannot be deleted.
« on: October 22, 2015, 11:02:17 AM »
Thanks guys. Issue resolved.

Dashboard > Management > Script lists all the current running scripts

Right click on a script and select Kill Script kills the script

I was then able to delete the custom script

6
General LabTech / This Script is Running so it cannot be deleted.
« on: October 22, 2015, 10:27:07 AM »
Hi Guys,

I am trying to delete a CUSTOM script but getting this error



I have checked under Scheduled Scripts and there are no traces of this script any where.

Any suggestions?

7
Script Exchange / Re: Cryptolocker Detection
« on: October 20, 2015, 04:04:57 PM »
That would be a great tool. Keep us posted

Pages: [1]