Automating Office 365 with PowerShell

•

0 recomendaciones•644 vistas

1stQuad Solutions

Office 365 bietet zahlreiche Möglichkeiten bezüglich der Verwaltung, unter anderem auch einen Zugriff per PowerShell. In dieser Session wird gezeigt, wie man einfache Aufgaben effîzient mit PowerShell lösen kann, beispielsweise das Erstellen mehrerer Site Collections und die Vergaben von Berechtigungen auf diese. Ausserdem wird ein kurzer Ausblick gegeben, wie man die existierenden PowerShell cmdlets für SharePoint Online in eigene Anwendungen einbinden kann, und wie man weitere cmdlets erstellen kann.

Office 365 (WAAD)
Exchange SharePoint Lync

Rollen
Gruppen
Benutzer
Subscriptions
Lizenzen

Tenant
Verwaltung
Upgrade
Site Collections
Benutzer Gruppen




Automating Office 365 with PowerShell

Automating Office 365 with PowerShell

Automating Office 365 with PowerShell

Más contenido relacionado

Destacado

The very best attackers often use PowerShell to hide their scripts from A/V and application whitelisting technologies using encoded commands and memory-only payloads to evade detection. These techniques thwart Blue Teams from determining what was executed on a target system. However, defenders are catching on, and state-of-the-art detection tools now monitor the command line arguments for powershell.exe either in real-time or from event logs. We need new avenues to remain stealthy in a target environment. So, this talk will highlight a dozen never-before-seen techniques for obfuscating PowerShell command line arguments. As an incident responder at Mandiant, I have seen attackers use a handful of these methods to evade basic command line detection mechanisms. I will share these techniques already being used in the wild so you can understand the value each technique provides the attacker. Updated PowerShell event logging mitigates many of the detection challenges that obfuscation introduces. However, many organizations do not enable this PowerShell logging. Therefore, I will provide techniques that the Blue Team can use to detect the presence of these obfuscation methods in command line arguments. I will conclude this talk by highlighting the public release of Invoke-Obfuscation. This tool applies the aforementioned obfuscation techniques to user-provided commands and scripts to evade command line argument detection mechanisms. --- Daniel Bohannon Daniel Bohannon is an Incident Response Consultant at MANDIANT with over six years of operations and information security experience. His particular areas of expertise include enterprise-wide incident response investigations, host-based security monitoring, data aggregation and anomaly detection, and PowerShell-based attack research and detection techniques. As an incident response consultant, Mr. Bohannon provides emergency services to clients when security breach occur. He also develops new methods for detecting malicious PowerShell usage at both the host- and network-level while researching obfuscation techniques for PowerShell- based attacks that are being used by numerous threat groups. Prior to joining MANDIANT, Mr. Bohannon spent five years working in both IT operations and information security roles in the private retail industry. There he developed operational processes for the automated aggregation and detection of host- and network-based anomalies in a large PCI environment. Mr. Bohannon also programmed numerous tools for host-based hunting while leading the organization’s incident response team. Mr. Bohannon received a Master of Science in Information Security from the Georgia Institute of Technology and a Bachelor of Science in Computer Science from The University of Georgia.

[CB16] Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To...

[CB16] Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To...

[CB16] Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To...

Malwarem armed with PowerShell

Malwarem armed with PowerShell

Malwarem armed with PowerShell

Lateral Movement - Phreaknik 2016

Lateral Movement - Phreaknik 2016

Lateral Movement - Phreaknik 2016

PSConfEU - Building an Empire with PowerShell

PSConfEU - Building an Empire with PowerShell

PSConfEU - Building an Empire with PowerShell

From the demise of conventional signature-based endpoint technologies have risen next generation solutions. These technologies have cluttered the marketplace introducing a conundrum for endpoint selection. This session will focus on the key requirements for effective security prevention, detection, and remediation. It will introduce a real-world framework for categorizing endpoint capabilities, and enable selection of solutions matching the unmet needs of security programs. The following topics will be covered: • What do i actually need? • Real-world framework to categorize endpoint capabilities • Map vendors into buckets within the framework • Housekeeping, what's needed before you even start? • Cheat sheet of probing questions to ask vendors • Best practices of deploying best of breed solutions

NextGen Endpoint Security for Dummies

NextGen Endpoint Security for Dummies

NextGen Endpoint Security for Dummies

Proper logging can catch breaches like retail PoS

Proper logging can catch breaches like retail PoS

Proper logging can catch breaches like retail PoS

Lateral Movement - Hacker Halted 2016

Lateral Movement - Hacker Halted 2016

Lateral Movement - Hacker Halted 2016

Logging for Hackers - What you need to know to catch them

Logging for Hackers - What you need to know to catch them

Logging for Hackers - What you need to know to catch them

Ask a Malware Archaeologist

Ask a Malware Archaeologist

Ask a Malware Archaeologist

PowerShell and the Future of Windows Automation

PowerShell and the Future of Windows Automation

PowerShell and the Future of Windows Automation

Concentrated Technology

Automating ad with powershell

Automating ad with powershell

Automating ad with powershell

Concentrated Technology

PowerShell 8tips

PowerShell 8tips

PowerShell 8tips

Concentrated Technology

PS scripting and modularization

PS scripting and modularization

PS scripting and modularization

Concentrated Technology

Managing SQLserver

Managing SQLserver

Managing SQLserver

Concentrated Technology

Best free tools for w d a

Best free tools for w d a

Best free tools for w d a

Concentrated Technology

PowerShell crashcourse

PowerShell crashcourse

PowerShell crashcourse

Concentrated Technology

Implementing dr w. hyper v clustering

Implementing dr w. hyper v clustering

Implementing dr w. hyper v clustering

Concentrated Technology

Best free tools for win database admin

Best free tools for win database admin

Best free tools for win database admin

Concentrated Technology

No-script PowerShell v2

No-script PowerShell v2

No-script PowerShell v2

Concentrated Technology

PowerShell crashcourse for Sharepoint admins

PowerShell crashcourse for Sharepoint admins

PowerShell crashcourse for Sharepoint admins

Concentrated Technology

Destacado (20)

[CB16] Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To...

[CB16] Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To...

[CB16] Invoke-Obfuscation: PowerShell obFUsk8tion Techniques & How To (Try To...

Malwarem armed with PowerShell

Malwarem armed with PowerShell

Malwarem armed with PowerShell

Lateral Movement - Phreaknik 2016

Lateral Movement - Phreaknik 2016

Lateral Movement - Phreaknik 2016

PSConfEU - Building an Empire with PowerShell

PSConfEU - Building an Empire with PowerShell

PSConfEU - Building an Empire with PowerShell

NextGen Endpoint Security for Dummies

NextGen Endpoint Security for Dummies

NextGen Endpoint Security for Dummies

Proper logging can catch breaches like retail PoS

Proper logging can catch breaches like retail PoS

Proper logging can catch breaches like retail PoS

Lateral Movement - Hacker Halted 2016

Lateral Movement - Hacker Halted 2016

Lateral Movement - Hacker Halted 2016

Logging for Hackers - What you need to know to catch them

Logging for Hackers - What you need to know to catch them

Logging for Hackers - What you need to know to catch them

Ask a Malware Archaeologist

Ask a Malware Archaeologist

Ask a Malware Archaeologist

PowerShell and the Future of Windows Automation

PowerShell and the Future of Windows Automation

PowerShell and the Future of Windows Automation

Automating ad with powershell

Automating ad with powershell

Automating ad with powershell

PowerShell 8tips

PowerShell 8tips

PowerShell 8tips

PS scripting and modularization

PS scripting and modularization

PS scripting and modularization

Managing SQLserver

Managing SQLserver

Managing SQLserver

Best free tools for w d a

Best free tools for w d a

Best free tools for w d a

PowerShell crashcourse

PowerShell crashcourse

PowerShell crashcourse

Implementing dr w. hyper v clustering

Implementing dr w. hyper v clustering

Implementing dr w. hyper v clustering

Best free tools for win database admin

Best free tools for win database admin

Best free tools for win database admin

No-script PowerShell v2

No-script PowerShell v2

No-script PowerShell v2

PowerShell crashcourse for Sharepoint admins

PowerShell crashcourse for Sharepoint admins

PowerShell crashcourse for Sharepoint admins

Automating Office 365 with PowerShell

1.

2.

3.

4. Office 365 (WAAD) Exchange SharePoint Lync

5. Rollen Gruppen Benutzer Subscriptions Lizenzen

6.

7.

9.

10.

11.

12.

13. Tenant Verwaltung Upgrade Site Collections Benutzer Gruppen