Book Image

Enterprise PowerShell Scripting Bootcamp

By : Brenton J.W. Blawat
Book Image

Enterprise PowerShell Scripting Bootcamp

By: Brenton J.W. Blawat

Overview of this book

Enterprise PowerShell Scripting Bootcamp explains how to create your own repeatable PowerShell scripting framework. This framework contains script logging methodologies, answer file interactions, and string encryption and decryption strategies. This book focuses on evaluating individual components to identify the system’s function, role, and unique characteristics. To do this, you will leverage built-in CMDlets and Windows Management Instrumentation (WMI) to explore Windows services, Windows processes, Windows features, scheduled tasks, and disk statistics. You will also create custom functions to perform a deep search for specific strings in files and evaluate installed software through executable properties. We will then discuss different scripting techniques to improve the efficiency of scripts. By leveraging several small changes to your code, you can increase the execution performance by over 130%. By the end of this book, you will be able to tie all of the concepts together in a PowerShell-based Windows server scanning script. This discovery script will be able to scan a Windows server to identify a multitude of components.
Table of Contents (21 chapters)
Enterprise PowerShell Scripting Bootcamp
Credits
About the Author
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface
3
Working with Answer Files
Index

Managing Windows processes


There may be times in scripting where you need to check if there is a running process on a system. PowerShell offers the get-process cmdlet to search for available processes on a system. By running the get-process cmdlet alone, you will get a report of all the running services on the system. The default record set that is returned about running services includes:

  • Handles: The number of thread handles that are being used by a particular process

  • NPM (K): Non-Paged Memory is the memory that is solely in physical memory, and not allocated to the page file that is being used by a process

  • PM (K): Pageable Memory is the memory that is being allocated to the page file that is used by a process

  • WS(K): Working Set is the memory recently referenced by the process

  • VM(M): Virtual Memory is the amount of virtual memory that is being used by a process

  • CPU(s): This is the processor time, or the time the CPU takes to utilize the process

  • ID: This is an assigned unique ID to the...