El TecnoBaúl de Kiquenet

Kiquenet boring stories

Archive for 27 septiembre 2012

Informática Forense y Seguridad

Posted by kiquenet en 27 septiembre 2012

Analizando correos fraudulentos: IP Received y Whois
http://elblogdeangelucho.wordpress.com/2012/06/28/seamos-nuestro-propio-csi-analizando-correos-fraudulentos/

http://www.adslayuda.com/
http://www.adslayuda.com/geolocalizacion.html

Cabeceras de mensajes de los principales proveedores de correo:
http://support.google.com/mail/bin/answer.py?hl=es&answer=22454&topic=1668977&ctx=topic

Técnicas de extracción de metadatos en ficheros ofimáticos
http://bad-robot.blogspot.com.es/2012/05/tecnicas-de-extraccion-de-metadatos-en.html

WebHistorian de Mandiant
http://bad-robot.blogspot.com.es/2010/08/web-historian.html

WebProfiler de Microsoft

Referencias:
http://bad-robot.blogspot.com.es/search/label/Forense
http://conexioninversa.blogspot.com.es/

Anuncios

Posted in Uncategorized | Leave a Comment »

How to Create, Modify and Delete Scheduled Tasks from the Command Line

Posted by kiquenet en 10 septiembre 2012

 

Windows XP/Server 2003 introduced us to the SchTasks command line tool which usurped the At tool offered in Windows 2000. This tool offers the ability to control every aspect of your Scheduled Tasks through calls to this command.

While the wizard Windows uses to help you graphically create Scheduled Tasks is very good, the command line tool is ideal for situations such as:

  • Manipulate tasks in batch scripts.
  • Control and create tasks on networked machines without having to login to them.
  • Mass create/sync task across multiple machines.
  • Use in custom applications to communicate with the Task Scheduler instead of having to make API calls.

As you can probably imagine, the SchTasks command has more options than we can cover in this article so we are going to focus on showing some examples of common task configurations and what the respective task looks like in the Task Scheduler.

Referencia: http://www.howtogeek.com/51236/how-to-create-modify-and-delete-scheduled-tasks-from-the-command-line/

Examples
Create ‘My Task’ to run C:RunMe.bat at 9 AM everyday:

SchTasks /Create /SC DAILY /TN “My Task” /TR “C:RunMe.bat” /ST 09:00

Modify ‘My Task’ to run at 2 PM:

SchTasks /Change /TN “My Task” /ST 14:00

 

Create ‘My Task’ to run C:RunMe.bat on the first of every month:

SchTasks /Create /SC MONTHLY /D 1 /TN “My Task” /TR “C:RunMe.bat” /ST 14:00

Create ‘My Task’ to run C:RunMe.bat every weekday at 2 PM:

SchTasks /Create /SC WEEKLY /D MON,TUE,WED,THU,FRI /TN “My Task” /TR “C:RunMe.bat” /ST 14:00

 

Delete the task named ‘My Task’:

SchTasks /Delete /TN “My Task”

Note: this will raise a warning which you will need to confirm.

Bulk Creation

Like any other command line tool, you can include multiple instructions in a batch file to accomplish bulk creation (or deletion).

For example, this script:

SchTasks /Create /SC DAILY /TN “Backup Data” /TR “C:Backup.bat” /ST 07:00
SchTasks /Create /SC WEEKLY /D MON /TN “Generate TPS Reports” /TR “C:GenerateTPS.bat” /ST 09:00
SchTasks /Create /SC MONTHLY /D 1 /TN “Sync Database” /TR “C:SyncDB.bat” /ST 05:00

Produces these tasks: Backup Data, Generate TPS Reports, Sync Database

 

The ability to do this is a quick way to roll out new tasks or change existing schedules to many machines at once. As a way to ensure the tasks are updated, you could include the appropriate SchTasks commands in a domain login script which will update user machines when they log in.

Microsoft Documentation on SchTasks Command

http://www.howtogeek.com/51236/how-to-create-modify-and-delete-scheduled-tasks-from-the-command-line/

Posted in Comandos, Scripts | Etiquetado: , , | Leave a Comment »