powershell-block-windows-attack
powershell-block-windows-attack copied to clipboard
MichaelApproved
Powershell script to block Windows brute force attack attempts based on previous failed attempts listed in the security event logs.
``` Property 'remoteaddresses' cannot be found on this object; make sure it exists and is settable. At C:\Users\Administrator\Documents\banIP.ps1:33 char:7 + $ar.
The script is fired from a event trigger using a cmd-file with: start "blockBFattacks" /d C:\BlockAttackers /min /high /wait powershell.exe /command C:\BlockAttackers\blockBFattacks.ps1
Hi, Thanks for the script - its really useful for me. I just spotted lots of errors when the script ran on my server. Looking into it further it was...
Metadata
Owner
Metadata
Powershell script to block Windows brute force attack attempts based on previous failed attempts listed in the security event logs.