Get-GPOZaurrFiles

Namespace GPOZaurr

Retrieves information about Group Policy Objects (GPOs) stored in SYSVOL and NETLOGON folders.

Remarks

This function retrieves information about GPOs stored in SYSVOL and NETLOGON folders of specified domains. It can filter by type of files and hash algorithms used for verification.

Examples

Authored help example

EXAMPLE 1

PS >


Get-GPOZaurrFiles -Type 'All' -HashAlgorithm 'SHA256' -Signature
Retrieves all files from SYSVOL and NETLOGON folders with SHA256 hash algorithm and includes file signatures.

EXAMPLE 2

PS >


Get-GPOZaurrFiles -Type 'Sysvol' -HashAlgorithm 'MD5' -AsHashTable
Retrieves only SYSVOL files with MD5 hash algorithm and returns the results as a hashtable.

Common Parameters

This command supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable.

For more information, see about_CommonParameters.

Syntax

Get-GPOZaurrFiles [-AsHashTable] [-ExcludeDomains <String[]>] [-Extended] [-ExtendedForestInformation <IDictionary>] [-ExtendedMetaData] [-Forest <String>] [-HashAlgorithm <MACTripleDES>] [-IncludeDomains <String[]>] [-Signature] [-Type <All|Netlogon|Sysvol>] [<CommonParameters>]

Parameter set: All Parameter Sets

Parameters

AsHashTable SwitchParameter optionalposition: namedpipeline: False: Indicates whether to return the results as a hashtable.
ExcludeDomains String[] optionalposition: 3pipeline: False: Specifies an array of domains to exclude from the search.
Extended SwitchParameter optionalposition: namedpipeline: False: Indicates whether to include extended information about the forest.
ExtendedForestInformation IDictionary optionalposition: 5pipeline: False: Specifies additional forest information to include.
ExtendedMetaData SwitchParameter optionalposition: namedpipeline: False: Indicates whether to include extended metadata information.
Forest String optionalposition: 2pipeline: Falsealiases: ForestName: Specifies the forest name to retrieve GPO information from.
HashAlgorithm String optionalposition: 1pipeline: Falsevalues: 7: Specifies the hash algorithm to use for file verification. Valid values are 'None', 'MACTripleDES', 'MD5', 'RIPEMD160', 'SHA1', 'SHA256', 'SHA384', 'SHA512'.; Possible values: MACTripleDES, MD5, RIPEMD160, SHA1, SHA256, SHA384, SHA512
IncludeDomains String[] optionalposition: 4pipeline: Falsealiases: Domain, Domains: Specifies an array of domains to include in the search.
Signature SwitchParameter optionalposition: namedpipeline: False: Indicates whether to include file signatures for verification.
Type String[] optionalposition: 0pipeline: Falsevalues: 3: Specifies the type of files to retrieve. Valid values are 'All', 'Netlogon', and 'Sysvol'.; Possible values: All, Netlogon, Sysvol