#normalize function strips wildcard characters before searching exchange to prevent accidental deletion
function normalize($str){
    $str = $str -replace '[*]',''
    $str = $str -replace '[?]',''
    return $str
    }
#validate email format based on Regex
function validate($eml){
    $EmailRegex = '^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,4})$'
    if ( $eml -match $EmailRegex ){
        return $eml
    }
    else{ return 0 }
}
#initialize variables to wildcards    
$choice = 0
$sender = '*'
$subject = '*'
$body = '*'

while ($choice -ne 10){
    Clear
    Write-Host ************Malicious Email Removal Tool************
    Write-Host Search criteria:
    Write-Host 1- Sender 
    Write-Host 2- Subject
    Write-Host 3- Body
    Write-Host 4- Review information
    Write-Host 5- Remove evil
    Write-Host 9- Clear entries
    Write-Host 10- Quit 
    $choice = Read-Host Enter your selection 
    
    If ($choice -eq 1) {
        Write-Host Enter the senders email address `(Wildcard characters are not allowed and will be stripped`)
        $sender = Read-Host
        $sender = normalize($sender)
        if ( validate($sender) ) {continue}
        else {
            Write-Host You entered: $sender which is not a valid email address. Please re-enter.
            Read-Host Press enter}
        }
    elseif ($choice -eq 2) {
        Write-Host Enter some or all of the subject line `(Wildcard characters are not allowed and will be stripped`)
        $subject = Read-Host
        $subject = normalize($subject)
        }
    elseif ($choice -eq 3){
        Write-Host Enter the body of the email or key phrases contained in the email `(Wildcard characters are not allowed and will be stripped`)
        $body = Read-Host
        $body = normalize($body)
        }
    elseif ($choice -eq 4){
        Write-Host Sender: $sender
        Write-Host Subject: $subject
        Write-Host Body: $body
        Read-Host Press ENTER
        }
    elseif ($choice -eq 5){
       #check to make sure values were set for all variables to prevent full wildcard search
	 if (($sender -eq '`*') -AND ($body -eq '`*') -AND ($subject = '`*'))
        {
            Write-Host "You didn't enter any search criteria"
            Read-Host "Press enter to continue"
            continue
        }
        $search = [scriptblock]::create("'sender:$sender AND body:`*$body`* AND subject:`*$subject`*'")
        Get-Mailbox | Search-Mailbox -SearchQuery $search  -TargetMailbox "blackhole" -TargetFolder "Evil"
        Read-host "Press enter to continue"
        }
    elseif ($choice -eq 9){
        $sender = '*'
        $subject = '*'
        $body = '*'
        }
        
    elseif ($choice -eq 10) {continue}
    else {
        Write-Host Invalid selection
        Read-Host Press enter to continue}
    }

Doug fucked around with this message at 22:38 on Feb 17, 2016

## Pull computer list from CSV file
$csv = import-csv "H:\My Documents\Python\test.csv"

foreach($csv_line in $csv)
{
    $ctag = $csv_line.ctag
    $name = $csv_line.name

    # Attempt to reduce timeout on test-connection
    $count = 1
    $timeout = 1000
    $filter = 'Address="{0}" and timeout={1}' -f $ctag, $timeout
   
    #$test_ping = test-connection $ctag -Count 1 -ErrorAction SilentlyContinue
    $test_ping = Get-WmiObject -Class Win32_PingStatus -Filter $filter | Select-Object ResponseTime
    echo $test_ping

    if ($test_ping) {echo "Success"}else{echo "Fail"}
#
#        $LatestFolder = Get-ChildItem \\$ctag\c$\Users | sort lastwritetime -desc | select -first 1
#        $Username = $LatestFolder.name
#        echo "CTAG: $ctag, SS Owner: $name, last logged in user:  $username"
#        } else {echo "Host is unreachable through DNS"}

}

Gothmog1065 fucked around with this message at 15:18 on Feb 22, 2016

Gothmog1065 fucked around with this message at 15:24 on Feb 23, 2016

Methanar fucked around with this message at 20:26 on Feb 23, 2016

Gothmog1065 fucked around with this message at 17:38 on Mar 1, 2016