CyberPolice

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs | README

commit 6625dd4065b17809c37abfc98b30f9fc23c5dfd2
parent c2148d2e9dfcfcbac4ca0f69c2ed4ef10c6f6482
Author: Q <PlutoTank@users.noreply.github.com>
Date:   Fri, 29 Nov 2019 12:53:28 -0500

Update README.md
Diffstat:
MREADME.md | 72+++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
1 file changed, 51 insertions(+), 21 deletions(-)

diff --git a/README.md b/README.md @@ -8,26 +8,26 @@ This script was made for Cyber Patriot competition but can be used for other use Run `CyberPolice.bat` as Administrator #### Functions -```checkfiles``` Gamer\ -```usermgmtff```\ -```userprop```\ -```services```\ -```firewall```\ -```features```\ -```passwordPol```\ -```audit```\ -```lockout```\ -```rdp```\ -```power```\ -```sessions```\ -```shares```\ -```checkdns```\ -```uac```\ -```backuplsp```\ -```lsp```\ -```regharden```\ -```verifysys```\ -```auto``` +```checkfiles``` (searches for specified extentions and words, outputs all to a log)\ +```usermgmtff``` ([link](#user) How this works):\ +```userprop``` (sets properties for users that is secure, like expiring passwords and change on login)\ +```services``` (logs services on machine, disabled specific services set in `FirewallRulesOFF.txt`)\ +```firewall``` (turns on firewall, disables set firewall rules in `Auto.txt`, `Disabled.txt`, `Manual.txt`)\ +```features``` (turns off specified Windows features in `BadWinFeatures.txt`)\ +```passwordPol``` (sets secure password policy)\ +```audit``` (sets secure audit policy)\ +```lockout``` (sets secure lockout policy)\ +```rdp``` (turns rdp on/off and sets policies to allow for rdp on/off)\ +```power``` (sets power settings)\ +```sessions``` (checks for remote sessions and logs it)\ +```shares``` (logs current shares, prompts user to edit shares)\ +```checkdns``` (logs dns and hosts file, clears them afterwards)\ +```uac``` (turns on UAC)\ +```backuplsp``` (backs up current local security policy)\ +```lsp``` (sets local security policy based one ones in/put in `ConfigFiles\lgpoTemplates`)\ +```regharden``` (sets settings in the registy that are specified `RegistyHardenData.txt`)\ +```verifysys``` (runs `sfc /verifyonly`)\ +```auto``` (runs all functions in logical order)\ ### Tested OS' | Windows Version | Tested | @@ -50,4 +50,34 @@ Files that allow for commenting:\ ```RegistryHardenData.txt```\ ```FirewallRulesOFF.txt``` -Most config files you just put the name of the object you want to change in the text file that applies to that object +Most config files you just put the name of the object you want to change in the text file that applies to that object\ + +`RegistyHardenData.txt` Useage\ +To enter a registry change do the following (with ":" included)\ +```Path:Key:Variable:Value```\ +Example:\ +```HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon:AutoAdminLogon:REG_DWORD:0```\ + +### <a name="user"></a> User Config +The `PasteUsersHere.txt` is to be copy and pasted from the Cyber Patriot competition README (or made yourself)\ +Example:\ +```Authorized Administrators: +bwayne (you) + password: !@mBatM@n! +jgordon + password: BaRbr@ +apennyworth + password: WayN3$ +tdrake + password: T1tANsGo! +bgordon + password: password +Authorized Users: +hbullock +lfox +harold +hstrange +jtodd +twayne +dwayne +skyle```\