WS1 Sensors Samples
Code Samples¶
This is an index of Code Samples within the UEM-Samples/Sensors area.
Workspace ONE Sensors Samples¶
| Platform | Sample Name | Summary | Link |
|---|---|---|---|
| macOS | ad_bind.sh | Script used to bind device to AD and ensure healthy status throughout device lifecycle | ad_bind.sh |
| macOS | apple_enterprise_connect_version.sh | Return Apple Enterprise Connect version info | apple_enterprise_connect_version.sh |
| macOS | AppleCare_coverageEndDate.sh | Returns Apple Care Support End Date | AppleCare_coverageEndDate.sh |
| macOS | battery_condition.sh | Returns current battery highlevel status | battery_condition.sh |
| macOS | battery_current_capacity.sh | Returns current battery capacity | battery_current_capacity.sh |
| macOS | battery_current_charge.sh | Returns current battery charge percentage | battery_current_charge.sh |
| macOS | battery_cycle_count.sh | Returns the battery cycle count | battery_cycle_count.sh |
| macOS | battery_health_status.sh | Returns true or false of Battery PrematureFailureStatus | battery_health_status.sh |
| macOS | battery_max_capacity.sh | Returns current battery maximum capacity percentage | battery_max_capacity.sh |
| macOS | check_for_expiring_certs.sh | Sensor to find certificates in the current user store that match a given subject search string and check if they are revoked. | check_for_expiring_certs.sh |
| macOS | check_recovery_partition.sh | Return true or false if recovery partition is enabled | check_recovery_partition.sh |
| macOS | chrome_version.sh | Return Google Chrome browser version info | chrome_version.sh |
| macOS | druva_insync_version.sh | Return Druva InSync version info | druva_insync_version.sh |
| macOS | firefox_version.sh | Return Firefox Browser version info | firefox_version.sh |
| macOS | Generic-AppVersion.sh | Paste the following in a macOS Custom Attributes payload to create an App Version attribute that can be leveraged as an Assignment Rule for a Product | Generic-AppVersion.sh |
| macOS | get_last_reboot_time.sh | Returns date and time of last reboot. Can be formatted differently or to an integer. Also try uptime |
get_last_reboot_time.sh |
| macOS | get_lastapplaunch.sh | Used to determine the last time a particular app was launched. Make sure to update the filePath= line to match the pasth of the app in question. Multiple examples using Firefox as the app. | get_lastapplaunch.sh |
| macOS | get_local_admins.sh | Returns list of local Admin users | get_local_admins.sh |
| macOS | get_logged_in_user.sh | Returns the username of the logged in user | get_logged_in_user.sh |
| macOS | global_protect_version.sh | Return Palo Alto Global Protect version info | global_protect_version.sh |
| macOS | java_version.sh | Return Java Runtime version info | java_version.sh |
| macOS | macos_is_device_covered_by_applecare .sh | Is the device covered by AppleCare | macos_is_device_covered_by_applecare .sh |
| macOS | macos_os_supported_upgrade.sh | Use SoftwareUpdate to display latest OS available for the specific device | macos_os_supported_upgrade.sh |
| macOS | macos_rsr_version.sh | Current Apple RSR Version | macos_rsr_version.sh |
| macOS | macos_secure_token_status.sh | Secure Token Status | macos_secure_token_status.sh |
| macOS | macos_storage_applications.sh | Show How Much Drive space is being consumed by Applications Installed on the device | macos_storage_applications.sh |
| macOS | macos_storage_available_disk_space.sh | Show How Much Drive space is available on the device | macos_storage_available_disk_space.sh |
| macOS | macos_storage_documents_all_users.sh | Show How Much Drive space is being consumed by the Documents folder on the device | macos_storage_documents_all_users.sh |
| macOS | macos_storage_downloads_all_users.sh | Show How Much Drive space is being consumed by Downloads Directory on the device | macos_storage_downloads_all_users.sh |
| macOS | macos_storage_music_all_users.sh | Show How Much Drive space is being consumed by Music Directory on the device | macos_storage_music_all_users.sh |
| macOS | macos_storage_photos_all_users.sh | Show How Much Drive space is being consumed by Photos Directory on the device | macos_storage_photos_all_users.sh |
| macOS | macos_storage_system.sh | Show How Much Drive space is being consumed by the Systems Folder on the device | macos_storage_system.sh |
| macOS | macos_storage_total_disk_size_marketing.sh | What is the size of the hard drive installed? | macos_storage_total_disk_size_marketing.sh |
| macOS | macos_storage_used_disk_space.sh | Show How Much Drive space is being used on the device | macos_storage_used_disk_space.sh |
| macOS | macos_system_allow_all_kernel_extensions.sh | Show If Kernel extensions are allowed to be installed | macos_system_allow_all_kernel_extensions.sh |
| macOS | macos_system_baf_status.sh | Whatis the current boot arguments filter | macos_system_baf_status.sh |
| macOS | macos_system_boot_args.sh | Is Boot Arguments Filtering Enabled | macos_system_boot_args.sh |
| macOS | macos_system_boot_uuid.sh | What is the current macOS System Boot UUID | macos_system_boot_uuid.sh |
| macOS | macos_system_chip.sh | What CPU is installed on the device | macos_system_chip.sh |
| macOS | macos_system_cpu_core_count.sh | How many cores does the device have | macos_system_cpu_core_count.sh |
| macOS | macos_system_dep_approved_privileged_mdm_operations.sh | Is DEP Approved priveledged MDM Operation Enabled | macos_system_dep_approved_privileged_mdm_operations.sh |
| macOS | macos_system_firmware_version.sh | What is the current System Firmeware Version | macos_system_firmware_version.sh |
| macOS | macos_system_kctrr_status.sh | Is KCTRR Enabled | macos_system_kctrr_status.sh |
| macOS | macos_system_model_identifier.sh | Apple Model Identifer | macos_system_model_identifier.sh |
| macOS | macos_system_model_name.sh | Apple System Model Name | macos_system_model_name.sh |
| macOS | macos_system_secure_boot.sh | Display current Secure Boot Securit Policy | macos_system_secure_boot.sh |
| macOS | macos_system_sip.sh | Is SIP enabled | macos_system_sip.sh |
| macOS | macos_system_ssv_status.sh | Is SSV Enabled | macos_system_ssv_status.sh |
| macOS | macos_system_tseries_chip_check.sh | Does the device have an Apple T2 Chip? | macos_system_tseries_chip_check.sh |
| macOS | macos_system_user_approved_privileged_mdm.sh | Are System user approved Priviledged MDM enabled? | macos_system_user_approved_privileged_mdm.sh |
| macOS | macos_users_most_logged_in.sh | Parse the Login History and Find the most frequent user of the device | macos_users_most_logged_in.sh |
| macOS | microsoft_excel_version.sh | Return Microsoft Excel version info | microsoft_excel_version.sh |
| macOS | microsoft_onedrive_version.sh | Return Microsoft OneDrive version info | microsoft_onedrive_version.sh |
| macOS | microsoft_onenote_version.sh | Return Microsoft OneNote version info | microsoft_onenote_version.sh |
| macOS | microsoft_outlook_version.sh | Return Microsoft Outlook version info | microsoft_outlook_version.sh |
| macOS | microsoft_powerpoint_version.sh | Return Microsoft PowerPoint version info | microsoft_powerpoint_version.sh |
| macOS | microsoft_word_version.sh | Return Microsoft Word version info | microsoft_word_version.sh |
| macOS | nessus_agent_status.sh | Return Tenable Nessus Agent status info | nessus_agent_status.sh |
| macOS | nessus_agent_version.sh | Return Tenable Nessus Agent info version info | nessus_agent_version.sh |
| macOS | os_active_interface_service_name.sh | Returns the name of the active network interface service name, such as Wi-Fi or Ethernet Adapter (en4) or Thunderbolt Bridge | os_active_interface_service_name.sh |
| macOS | os_active_ipv4_address.sh | Returns IPv4 Address of active interface. | os_active_ipv4_address.sh |
| macOS | os_active_ipv6_address.sh | Returns IPv6 Address of active interface. | os_active_ipv6_address.sh |
| macOS | os_active_network_interface.sh | Returns the name of the active network interface, such as en0 | os_active_network_interface.sh |
| macOS | os_build_version.sh | Returns the OS build version | os_build_version.sh |
| macOS | os_filevault_status_detail.sh | Returns FileVault encryption status of device as well as FV recovery key status. | os_filevault_status_detail.sh |
| macOS | os_filevault_status.sh | Returns Present or Not Present for File Vault existence | os_filevault_status.sh |
| macOS | os_findmy_enabled.sh | Returns Enabled or Disabled if Find my Mac is enabled | os_findmy_enabled.sh |
| macOS | os_firewall_status.sh | Returns Apple firewall enabled / disabled status | os_firewall_status.sh |
| macOS | os_gatekeeper_version.sh | Returns GateKeeper info if enabled. Displays install date, version and update info. | os_gatekeeper_version.sh |
| macOS | os_hostname.sh | Returns hostname of device | os_hostname.sh |
| macOS | os_icloud_loggedin.sh | Returns True or False if user is logged in | os_icloud_loggedin.sh |
| macOS | os_icloud_user.sh | Returns the configured iCloud username of the device | os_icloud_user.sh |
| macOS | os_mac_address.sh | Gets the physcial MAC address from the Wi-Fi hardware module. | os_mac_address.sh |
| macOS | os_mrt_version.sh | Returns Malware Removal Tool (MRT) version info. Attributed to https://gist.githubusercontent.com/rtrouton/d70170eb5cfc5410041931bff412c11d/raw/42ce26a3a4ae5851551a45043f7eb1c66458a506/check_latest_Xprotect_Gatekeeper_MRT_update.sh | os_mrt_version.sh |
| macOS | os_openssl_version.sh | Returns OpenSSL client version | os_openssl_version.sh |
| macOS | os_rename_mac.sh | Returns current hostname of the machine | os_rename_mac.sh |
| macOS | os_ssh_version.sh | Return SSH version | os_ssh_version.sh |
| macOS | os_version.sh | Returns OS Version number | os_version.sh |
| macOS | os_xprotect_version.sh | Return XProtect Info. Return XProtect install date, version and update info. | os_xprotect_version.sh |
| macOS | rsa_securid_version.sh | Return RSA SecureID version info | rsa_securid_version.sh |
| macOS | skype_for_business_version.sh | Return Skype for Business version info | skype_for_business_version.sh |
| macOS | socialcast_version.sh | Return Socialcast version info | socialcast_version.sh |
| macOS | system_cpu_arch.sh | Returns CPU processor architecture. Either arm64, x86_64 or unknown_cpu. | system_cpu_arch.sh |
| macOS | system_disk_free_space.sh | Returns free disk space of root volume / | system_disk_free_space.sh |
| macOS | system_integrity_protection_status.sh | Check if SIP (system integrity protection) is enabled | system_integrity_protection_status.sh |
| macOS | system_processor_speed.sh | Returns CPU info, including speed on pre M1 Models | system_processor_speed.sh |
| macOS | system_tseries_chip_check.sh | Return the T-Series chip value, if present. If a pre T-series device, will report Pre T1 | system_tseries_chip_check.sh |
| macOS | vmware_fusion_version.sh | Return VMware Fusion version info | vmware_fusion_version.sh |
| macOS | vmware_horizon_client_version.sh | Return VMware Horizon Client version info | vmware_horizon_client_version.sh |
| Linux | get_currentuser.sh | Returns the current logged on user | get_currentuser.sh |
| Linux | linux_distribution.sh | Return the Linux Distro Name | linux_distribution.sh |
| Linux | linux_security_updates.sh | Returns true if security updates are available for device | linux_security_updates.sh |
| Linux | linux_sshd.sh | Returns if SSHD running | linux_sshd.sh |
| Linux | linux_updates.sh | Returns true if OS updates are available to the device | linux_updates.sh |
| Windows | battery_actual_capacity.ps1 | Returns the full charge (actual) capacity of the batteries in mWh | battery_actual_capacity.ps1 |
| Windows | battery_charging_status.ps1 | Returns Charging or Not Charging if the battery is charging or not | battery_charging_status.ps1 |
| Windows | battery_designed_capacity.ps1 | Returns the max charge capacity of the batteries in mWh (megawatt hour) | battery_designed_capacity.ps1 |
| Windows | battery_estimated_charge_remaining.ps1 | Returns the estimated remaining charge on the battery | battery_estimated_charge_remaining.ps1 |
| Windows | battery_health_percentage.ps1 | Returns the max charge capacity of the batteries as an integer | battery_health_percentage.ps1 |
| Windows | battery_max_capacity.ps1 | Returns the max charge capacity of the batteries | battery_max_capacity.ps1 |
| Windows | bc_clientconfig_currentclientmode.ps1 | Returns Branch Cache Client Configuration details CurrentClientMode. Returns - Enabled, Disabled | bc_clientconfig_currentclientmode.ps1 |
| Windows | bc_clientconfig_hostedcachediscoveryenabled.ps1 | Returns Branch Cache Client Configuration details CurrentClientMode. Returns - True, False | bc_clientconfig_hostedcachediscoveryenabled.ps1 |
| Windows | bc_clientconfig_hostedcacheserverlist.ps1 | Returns BranchCache Client Configuration details HostedCacheServerList | bc_clientconfig_hostedcacheserverlist.ps1 |
| Windows | bc_contentconfig_contentserverisenabled.ps1 | Returns Branch Cache ContentServerConfiguration details. Returns - True/False | bc_contentconfig_contentserverisenabled.ps1 |
| Windows | bc_datacache_cachefiledirectorypath.ps1 | Returns Branch Cache DataCache CacheFileDirectoryPath details. Returns - Default/a file path | bc_datacache_cachefiledirectorypath.ps1 |
| Windows | bc_datacache_currentactivecachesize.ps1 | Returns Branch Cache DataCache details | bc_datacache_currentactivecachesize.ps1 |
| Windows | bc_datacache_currentsizeondiskasnumberofbytes.ps1 | Returns Branch Cache DataCache CurrentSizeOnDiskAsNumberOfBytes details | bc_datacache_currentsizeondiskasnumberofbytes.ps1 |
| Windows | bc_datacache_maxcachesizeasnumberofbytes.ps1 | Returns Branch Cache DataCache MaxCacheSizeAsNumberOfBytes details | bc_datacache_maxcachesizeasnumberofbytes.ps1 |
| Windows | bc_datacache_maxcachesizeaspercentageofdiskvolume.ps1 | Returns Branch Cache DataCache MaxCacheSizeAsPercentageOfDiskVolume details | bc_datacache_maxcachesizeaspercentageofdiskvolume.ps1 |
| Windows | bc_hashcache_cachefiledirectorypath.ps1 | Returns Branch Cache HashCache CacheFileDirectoryPath. Returns default/file path | bc_hashcache_cachefiledirectorypath.ps1 |
| Windows | bc_hashcache_currentactivecachesize.ps1 | Returns Branch Cache HashCache CurrentActiveCacheSize details | bc_hashcache_currentactivecachesize.ps1 |
| Windows | bc_hashcache_currentsizeondiskasnumberofbytes.ps1 | Returns Branch Cache HashCache CurrentSizeOnDiskAsNumberOfBytes details | bc_hashcache_currentsizeondiskasnumberofbytes.ps1 |
| Windows | bc_hashcache_maxcachesizeasnumberofbytes.ps1 | Returns Branch Cache HashCache MaxCacheSizeAsNumberOfBytes details | bc_hashcache_maxcachesizeasnumberofbytes.ps1 |
| Windows | bc_hashcache_maxcachesizeaspercentageofdiskvolume.ps1 | Returns Branch Cache HashCache MaxCacheSizeAsPercentageOfDiskVolume details | bc_hashcache_maxcachesizeaspercentageofdiskvolume.ps1 |
| Windows | bc_networkconfig_contentretrievalfirewallrulesenabled.ps1 | Returns Branch Cache NetworkConfiguration ContentRetrievalFirewallRulesEnabled details. Returns true/false | bc_networkconfig_contentretrievalfirewallrulesenabled.ps1 |
| Windows | bc_networkconfig_contentretrievalurlreservationenabled.ps1 | Returns Branch Cache NetworkConfiguration ContentRetrievalUrlReservationEnabled status. Returns true/false | bc_networkconfig_contentretrievalurlreservationenabled.ps1 |
| Windows | bc_networkconfig_hostedcacheclientfirewallrulesenabled.ps1 | Returns Branch Cache NetworkConfiguration HostedCacheClientFirewallRulesEnabled status. Returns true/false | bc_networkconfig_hostedcacheclientfirewallrulesenabled.ps1 |
| Windows | bc_networkconfig_hostedcachehttpsurlreservationenabled.ps1 | Returns Branch Cache NetworkConfiguration HostedCacheHttpsUrlReservationEnabled status. Returns true/false | bc_networkconfig_hostedcachehttpsurlreservationenabled.ps1 |
| Windows | bc_networkconfig_hostedcachehttpurlreservationenabled.ps1 | Returns Branch Cache NetworkConfiguration HostedCacheHttpUrlReservationEnabled status. Returns true/false | bc_networkconfig_hostedcachehttpurlreservationenabled.ps1 |
| Windows | bc_networkconfig_hostedcacheserverfirewallrulesenabled.ps1 | Returns Branch Cache NetworkConfiguration HostedCacheServerFirewallRulesEnabled status. Returns true/false | bc_networkconfig_hostedcacheserverfirewallrulesenabled.ps1 |
| Windows | bc_networkconfig_peerdiscoveryfirewallrulesenabled.ps1 | Returns Branch Cache NetworkConfiguration PeerDiscoveryFirewallRulesEnabled status. Returns true/false | bc_networkconfig_peerdiscoveryfirewallrulesenabled.ps1 |
| Windows | bc_status_branchcacheisenabled.ps1 | Returns Branch Cache Client Status. Returns true/false | bc_status_branchcacheisenabled.ps1 |
| Windows | bc_status_branchcacheservicestarttype.ps1 | Returns Branch Cache Client Service Startup Type | bc_status_branchcacheservicestarttype.ps1 |
| Windows | bc_status_branchcacheservicestatus.ps1 | Returns Branch Cache Client Service Status | bc_status_branchcacheservicestatus.ps1 |
| Windows | bios_secure_boot.ps1 | Returns True/False if Secure Boot is Enabled or Disabled | bios_secure_boot.ps1 |
| Windows | bios_serial_number.ps1 | Returns the devices serial number | bios_serial_number.ps1 |
| Windows | bios_smbios_present.ps1 | Returns True/False whether the SMBIOS is Present | bios_smbios_present.ps1 |
| Windows | bios_smbios_version.ps1 | Returns the SMBIOS Version | bios_smbios_version.ps1 |
| Windows | bios_status.ps1 | Returns the BIOS Status. Statuses include: OK, Degraded, and Pred Fail (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Nonoperational statuses include: Error, Starting, Stopping, and Service. The latter, Service, could apply during mirror-resilvering of a disk, reload of a user permissions list, or other Systemistrative work. Not all such work is online, yet the managed element is neither OK nor in one of the other states. | bios_status.ps1 |
| Windows | check_for_expiring_certs.ps1 | Sensor to find certificates in the current user store that match a given subject search string and check if they are revoked. | check_for_expiring_certs.ps1 |
| Windows | dcu_locked.ps1 | Returns boolean status if Dell Command | Update UI is Locked. If DCU is not installed, returns False. |
| Windows | dcu_version.ps1 | Returns Dell Command Update Version | dcu_version.ps1 |
| Windows | defender_outofdate14.ps1 | Returns True if Windows Defender signature was last updated less than or equal to 14 day ago and more than 7 day ago. | defender_outofdate14.ps1 |
| Windows | defender_outofdate7.ps1 | Returns True if Windows Defender signature was last updated less than or equal to 7 day ago and more than 1 day ago. | defender_outofdate7.ps1 |
| Windows | defender_reqfullscan.ps1 | Returns True if any threat is detected and status requires FullScan, eg. is either FullScanRequired, FullScanAndRebootRequired, FullScanAndManualStepsRequired, FullScanAndRebootAndManualStepsRequired, FullScanAndOfflineScanRequired, FullScanAndManualStepsAndOfflineScanRequired, FullScanAndRebootAndManualStepsAndOfflineScanRequired | defender_reqfullscan.ps1 |
| Windows | defender_reqofflinescan.ps1 | Returns True if any threat is detected and status is OfflineScanRequired | defender_reqofflinescan.ps1 |
| Windows | defender_reqreboot.ps1 | Returns True if any threat is detected and any status requires Reboot, eg. is either RebootRequired, FullScanAndRebootRequired, RebootAndManualStepsRequired, FullScanAndRebootAndManualStepsRequired, RebootAndOfflineScanRequired, FullScanAndRebootAndOfflineScanRequired, RebootAndManualStepsAndOfflineScanRequired, FullScanAndRebootAndManualStepsAndOfflineScanRequired | defender_reqreboot.ps1 |
| Windows | defender_threatremovalfailure.ps1 | Returns True if any threat is detected and the status is either CleanFailed, QuarantineFailed, RemoveFailed, AllowFailed, Abondoned, or BlockedFailed | defender_threatremovalfailure.ps1 |
| Windows | defender_uptodate.ps1 | Returns True if Windows Defender signature was last updated less than or equal to 1 day ago. You want this to be True! | defender_uptodate.ps1 |
| Windows | get_bitlocker_encryption_method.ps1 | Returns Encryption Method C: drive. Return values include - Aes128, Aes256, XtsAes128, XtsAes256 | get_bitlocker_encryption_method.ps1 |
| Windows | get_bitlocker_recovery_keys.ps1 | Return Bitlocker Recovery Keys for each volume | get_bitlocker_recovery_keys.ps1 |
| Windows | get_certwithsan.ps1 | Sensor to find certificate in CurrentUser with specific SAN and return TRUE | FALSE |
| Windows | get_current_username.ps1 | Return the current logged on username. | get_current_username.ps1 |
| Windows | get_daysuntildellwarrantyexpires.ps1 | Get number of days until Dell Warranty Expires | get_daysuntildellwarrantyexpires.ps1 |
| Windows | get_dellmodel.ps1 | Get the Model of a Dell PC | get_dellmodel.ps1 |
| Windows | get_deploymentring.ps1 | Use this sensor to write a random number to the registry if not already set and return the value to WS1 Intelligence. Can be used to create dynamic SmartGroups for Windows Update Deployment Rings. | get_deploymentring.ps1 |
| Windows | get_eventlogid8.ps1 | Returns value of 1 if Event ID is found in Windows Event Log | get_eventlogid8.ps1 |
| Windows | get_geolocation1.ps1 | Use this sensor to determine the Country or Region or City of the device based upon the NATd Public IP. | get_geolocation1.ps1 |
| Windows | get_geolocation2.ps1 | Use this sensor to determine the Country or Region or City of the device based upon the NATd Public IP. Uses Locationiq.com service to reverse geocode the Lat & Long of the NATd address. | get_geolocation2.ps1 |
| Windows | get_hostname.ps1 | Get local hostname or computername | get_hostname.ps1 |
| Windows | get_ipsubnet.ps1 | Return Site Name based on IP Subnet Octet + IP Default GW | get_ipsubnet.ps1 |
| Windows | get_jsonalerts.ps1 | Returns various attributes from a JSON file | get_jsonalerts.ps1 |
| Windows | get_JSONFiledata.ps1 | Returns value from json file. Use this sensor to read a JSON file and return a value from a node | get_JSONFiledata.ps1 |
| Windows | get_udid_ws1.ps1 | Return WS1 Device UUID | get_udid_ws1.ps1 |
| Windows | get_update_status.ps1 | Report Status of Windows Update of a device, rather than individual updates. Responses include - Up-To-Date | Pending Reboot |
| Windows | get_userandcomputername.ps1 | Return current logged in user comma computername | get_userandcomputername.ps1 |
| Windows | get_windows_sid.ps1 | Returns the Windows SID for the current logged in user. | get_windows_sid.ps1 |
| Windows | get_windowseventid.ps1 | Returns true or false if Event ID is found in Windows Event Log. Use this sensor to report if an Event ID is reported in a Windows Event Log within the time window. Will return true if it finds an event with matching event id in matching event log | get_windowseventid.ps1 |
| Windows | get_winlogonevents.ps1 | Returns user logon event info for past 1 day found in Windows Security Event Log. Excludes SYSTEM logon events, preventing reporting of system services | get_winlogonevents.ps1 |
| Windows | horizon_broker_url.ps1 | Returns Horizon Broker URL from Horizon Volatile Registry Key | horizon_broker_url.ps1 |
| Windows | horizon_protocol.ps1 | Returns Horizon protocol information from Horizon Volatile Registry Key | horizon_protocol.ps1 |
| Windows | monitor_friendly_name.ps1 | Returns friendly name of the Monitor | monitor_friendly_name.ps1 |
| Windows | omadm_sync_attempted.ps1 | Returns the last date and time that the device last attempted a OMA-DM sync. | omadm_sync_attempted.ps1 |
| Windows | omadm_sync_failure.ps1 | Returns the last date and time that the device failed the OMA-DM sync. | omadm_sync_failure.ps1 |
| Windows | omadm_sync_result.ps1 | Returns the current OMA-DM status (HEX) or error code. 0 = success; else return error code e.g. 0x80072f30 | omadm_sync_result.ps1 |
| Windows | omadm_sync_success.ps1 | Returns the last date and time that the device successfully completed OMA-DM sync. | omadm_sync_success.ps1 |
| Windows | os_architecture.ps1 | Returns OS Architecture (32-bit or 64-bit) | os_architecture.ps1 |
| Windows | os_browser_default.ps1 | Returns the users default web browser. | os_browser_default.ps1 |
| Windows | os_build_number.ps1 | Returns build number e.g. 19041 | os_build_number.ps1 |
| Windows | os_build_ubr.ps1 | Returns Windows version Major.Minor.Build.Revision (e.g. 10.0.22000.1455) | os_build_ubr.ps1 |
| Windows | os_build_version.ps1 | Returns Windows version e.g. 2009 | os_build_version.ps1 |
| Windows | os_cpu_usage_processname.ps1 | Returns the average amount of processor time that the process has used on all processors, in seconds. Change TaskScheduler to your process name | os_cpu_usage_processname.ps1 |
| Windows | os_cpu_usage.ps1 | Returns load capacity of each processor, averaged to the last second. | os_cpu_usage.ps1 |
| Windows | os_disk_free_space.ps1 | Returns free space on System Drive (in GB) | os_disk_free_space.ps1 |
| Windows | os_disk_size.ps1 | Returns size of the System Drive (in GB) | os_disk_size.ps1 |
| Windows | os_edition.ps1 | Returns Windows Edition (e.g. Enterprise, Education, Home, Professional) | os_edition.ps1 |
| Windows | os_file_search_psexec.ps1 | Searches file system for specified file existence (psexec.exe and psexec64.exe) on C:\ drive | os_file_search_psexec.ps1 |
| Windows | os_folder_size_mypictures.ps1 | Returns the total size of a folder in MB | os_folder_size_mypictures.ps1 |
| Windows | os_folder_size_temp.ps1 | Returns the total size of a defined folder in MB | os_folder_size_temp.ps1 |
| Windows | os_ipv4_address.ps1 | Returns the systems IPv4 Address | os_ipv4_address.ps1 |
| Windows | os_ipv6_address.ps1 | Returns the systems IPv6 Address | os_ipv6_address.ps1 |
| Windows | os_java_version.ps1 | Returns Java Version e.g. 8.0.1910.12 | os_java_version.ps1 |
| Windows | os_memory_physical_usage.ps1 | Returns physical memory in use (in GB) | os_memory_physical_usage.ps1 |
| Windows | os_memory_usage_processname.ps1 | Returns the average amount of non-paged and paged memory that a defined process is using (in KB). Example returns usage for TaskScheduler. | os_memory_usage_processname.ps1 |
| Windows | os_memory_virtual_setting.ps1 | Returns the maximum size (in MB) of the current paging file | os_memory_virtual_setting.ps1 |
| Windows | os_memory_virtual_usage.ps1 | Returns used virtual memory (in GB) | os_memory_virtual_usage.ps1 |
| Windows | os_network_hosts_filehash.ps1 | Returns the sha256 hash of the hosts file on a system. | os_network_hosts_filehash.ps1 |
| Windows | os_network_interface_name.ps1 | Returns the name (description) of the active network interface | os_network_interface_name.ps1 |
| Windows | os_network_usage.ps1 | Returns network usage (in KB) | os_network_usage.ps1 |
| Windows | os_network_wifi_present.ps1 | Returns True/False if Wifi whether WiFi is present | os_network_wifi_present.ps1 |
| Windows | os_network_wifi_ssid.ps1 | Returns the currently connected SSID | os_network_wifi_ssid.ps1 |
| Windows | os_pending_reboot.ps1 | Returns True/False whether a devices is pending a reboot from a Windows Update(s) | os_pending_reboot.ps1 |
| Windows | os_power_plan_description.ps1 | Returns the description of the Power Plan | os_power_plan_description.ps1 |
| Windows | os_power_plan_name.ps1 | Returns the name of the Power Plan | os_power_plan_name.ps1 |
| Windows | os_powershell_version.ps1 | Returns the PowerShell Version in Major.Minor.Build.Revision format | os_powershell_version.ps1 |
| Windows | os_printers.ps1 | Returns the current list of network printers | os_printers.ps1 |
| Windows | os_process_running.ps1 | Returns True/False if specified process is running | os_process_running.ps1 |
| Windows | os_product_key.ps1 | Returns the value of the Windows Product Key | os_product_key.ps1 |
| Windows | search_psexec.ps1 | Returns list of psexec.exe and psexec64.exe files on C drive | search_psexec.ps1 |
| Windows | software_office_version.ps1 | Returns the MS Office (O365) version | software_office_version.ps1 |
| Windows | system_cpu_architecture.ps1 | Returns the CPU Architecture. Returns X86 | X64 |
| Windows | system_cpu_maxclockspeed.ps1 | Returns the max clock speed of the CPU. | system_cpu_maxclockspeed.ps1 |
| Windows | system_cpu_supported.ps1 | Returns true if the CPU is supported according to https://aka.ms/CPUlist. Returns Valid or Not Valid. | system_cpu_supported.ps1 |
| Windows | system_date.ps1 | Returns the systems date and time in the format YYYY-MM-DDT<24hrTime> | system_date.ps1 |
| Windows | system_dns_hostname.ps1 | Returns the computer name according to the DNS. | system_dns_hostname.ps1 |
| Windows | system_domain_membership.ps1 | Returns True or False depending if the system is part of a domain | system_domain_membership.ps1 |
| Windows | system_domain_name.ps1 | Returns domain name of currently joined domain or Workgroup if not in a domain | system_domain_name.ps1 |
| Windows | system_domain_role.ps1 | Returns the domain role of the system. | system_domain_role.ps1 |
| Windows | system_family.ps1 | Returns the family to which a system belongs. | system_family.ps1 |
| Windows | system_hash_svchost.ps1 | Returns the file hash using MD5 Algorithm | system_hash_svchost.ps1 |
| Windows | system_hostname.ps1 | Returns device hostname | system_hostname.ps1 |
| Windows | system_hypervisor_present.ps1 | Returns True/False if a hypervisor is/is not present | system_hypervisor_present.ps1 |
| Windows | system_logicalprocessors.ps1 | Returns the number of logical processors. Logical processors are number of physical CPUs * number of cores per CPU | system_logicalprocessors.ps1 |
| Windows | system_manufacturer.ps1 | Returns the name of the systems manufacturer | system_manufacturer.ps1 |
| Windows | system_model.ps1 | Returns the name of the systems Model | system_model.ps1 |
| Windows | system_pc_type.ps1 | Returns the type of system in use. Possible values: Unspecified, Desktop, Mobile, Workstation, Enterprise Server, SOHO Server, Appliance PC, Performance Server, Slate, Maximum. | system_pc_type.ps1 |
| Windows | system_rdp_status.ps1 | Returns the status of Remote Desktop Service | system_rdp_status.ps1 |
| Windows | system_status.ps1 | Returns the curren status of the system. Operational statuses include: OK, Degraded, and Pred Fail, which is an element such as a SMART-enabled hard disk drive that may be functioning properly, but predicts a failure in the near future. Nonoperational statuses include: Error, Starting, Stopping, and Service, which can apply during mirror-resilvering of a disk, reloading a user permissions list, or other Systemistrative work. Not all status work is online, but the managed element is not OK or in one of the other states. | system_status.ps1 |
| Windows | system_thermal_state.ps1 | Returns the thermal state of the system when last booted. Possible values include: other, unknown, safe, warning, critical, and non-recoverable. | system_thermal_state.ps1 |
| Windows | system_timezone.ps1 | Returns Time Zone | system_timezone.ps1 |
| Windows | system_totalphysicalmemory.ps1 | Returns Total Physical Memory in GB | system_totalphysicalmemory.ps1 |
| Windows | system_type.ps1 | Returns the system type. | system_type.ps1 |
| Windows | system_wakeup_type.ps1 | Returns the event that casued the system to power up. Possible values include: other, unknown, APM Timer, Modem Ring, LAN Remote, Power Switch, PCI PME, or AC Power Restored. | system_wakeup_type.ps1 |
| Windows | tpm_highest_version.ps1 | Return highest TPM Version the device supports | tpm_highest_version.ps1 |
| Windows | tpm_locked_out.ps1 | Returns True/False whether the TPM is locked out | tpm_locked_out.ps1 |
| Windows | tpm_lockout_heal_time.ps1 | Returns time (string) for how long the TPM will be locked out, if it locks | tpm_lockout_heal_time.ps1 |
| Windows | tpm_present.ps1 | Returns True/False whether there is a TPM on the current computer | tpm_present.ps1 |
| Windows | tpm_ready.ps1 | Returns True/False whether TPM is Ready to be used | tpm_ready.ps1 |
| Windows | wu_checkWSUSreg.ps1 | Used to check existance of WSUS registry keys, remove keys and report status. Status reported - WSUS removed if device had registry keys / WSUS not configured if no registry keys detected | wu_checkWSUSreg.ps1 |
| Windows | wu_status.ps1 | Report Status of Windows Update - Up-To-Date/Pending Reboot/Out-of-Date/Update-Failed/No Status | wu_status.ps1 |