{"id":19055428,"url":"https://github.com/evotecit/powershellmanager","last_synced_at":"2025-04-24T04:20:12.758Z","repository":{"id":95331727,"uuid":"291015738","full_name":"EvotecIT/PowerShellManager","owner":"EvotecIT","description":"Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.","archived":false,"fork":false,"pushed_at":"2021-01-19T18:15:29.000Z","size":29,"stargazers_count":40,"open_issues_count":0,"forks_count":7,"subscribers_count":6,"default_branch":"master","last_synced_at":"2025-04-18T12:18:48.102Z","etag":null,"topics":["hacktoberfest","powershell","restore","scripts"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/EvotecIT.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"License","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null},"funding":{"github":"PrzemyslawKlys","custom":["https://paypal.me/PrzemyslawKlys"]}},"created_at":"2020-08-28T10:14:29.000Z","updated_at":"2024-10-01T03:25:49.000Z","dependencies_parsed_at":"2023-06-25T23:59:13.672Z","dependency_job_id":null,"html_url":"https://github.com/EvotecIT/PowerShellManager","commit_stats":{"total_commits":16,"total_committers":1,"mean_commits":16.0,"dds":0.0,"last_synced_commit":"1b6355b064ced5318cce74b91f4d1f8862af5e24"},"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EvotecIT%2FPowerShellManager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EvotecIT%2FPowerShellManager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EvotecIT%2FPowerShellManager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EvotecIT%2FPowerShellManager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/EvotecIT","download_url":"https://codeload.github.com/EvotecIT/PowerShellManager/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250560918,"owners_count":21450320,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hacktoberfest","powershell","restore","scripts"],"created_at":"2024-11-08T23:45:00.274Z","updated_at":"2025-04-24T04:20:12.730Z","avatar_url":"https://github.com/EvotecIT.png","language":"PowerShell","funding_links":["https://github.com/sponsors/PrzemyslawKlys","https://paypal.me/PrzemyslawKlys"],"categories":[],"sub_categories":[],"readme":"﻿\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://www.powershellgallery.com/packages/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/powershellgallery/v/PowerShellManager.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://www.powershellgallery.com/packages/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/powershellgallery/vpre/PowerShellManager.svg?label=powershell%20gallery%20preview\u0026colorB=yellow\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/EvotecIT/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/github/license/EvotecIT/PowerShellManager.svg\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://www.powershellgallery.com/packages/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/powershellgallery/p/PowerShellManager.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/EvotecIT/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/github/languages/top/evotecit/PowerShellManager.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/EvotecIT/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/github/languages/code-size/evotecit/PowerShellManager.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://www.powershellgallery.com/packages/PowerShellManager\"\u003e\u003cimg src=\"https://img.shields.io/powershellgallery/dt/PowerShellManager.svg\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://twitter.com/PrzemyslawKlys\"\u003e\u003cimg src=\"https://img.shields.io/twitter/follow/PrzemyslawKlys.svg?label=Twitter%20%40PrzemyslawKlys\u0026style=social\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://evotec.xyz/hub\"\u003e\u003cimg src=\"https://img.shields.io/badge/Blog-evotec.xyz-2A6496.svg\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://www.linkedin.com/in/pklys\"\u003e\u003cimg src=\"https://img.shields.io/badge/LinkedIn-pklys-0077B5.svg?logo=LinkedIn\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n# PowerShellManager\n\nLittle PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs. More information [available on blog post](https://evotec.xyz/restoring-recovering-powershell-scripts-from-event-logs/).\n\n# Usage\n\nExtracing PowerShell scripts from Windows PowerShell Event Log and saving it to ScriptsLocal directory in same folder.\nFormat makes sure the script is formatted and, and AddMarkdown adds additional information to asses where the script is coming from.\n\n```powershell\nRestore-PowerShellScript -Type WindowsPowerShell -Path $PSScriptRoot\\ScriptsLocal -Verbose -Format -AddMarkdown\n```\n\nSame as above but with a difference that it scans remote servers (two of them). It does it in parallel.\n\n```powershell\n# Keep in mind AD1/AD2 will do it in parallel\nRestore-PowerShellScript -Type WindowsPowerShell -Path $PSScriptRoot\\ScriptsRemote -ComputerName AD1, AD2 -Verbose -Format -AddMarkdown\n```\n\n## To install\n\nJust install module from PowerShellGallery.\n\n```powershell\nInstall-Module -Name PowerShellManager -AllowClobber -Force\n```\n\nForce and AllowClobber aren't necessary, but they do skip errors in case some appear.\n\n## And to update\n\n```powershell\nUpdate-Module -Name PowerShellManager\n```\n\nThat's it. Whenever there's a new version, you run the command, and you can enjoy it. Remember that you may need to close, reopen PowerShell session if you have already used module before updating it.\n\n**The essential thing** is if something works for you on production, keep using it till you test the new version on a test computer. I do changes that may not be big, but big enough that auto-update may break your code. For example, small rename to a parameter and your code stops working! Be responsible!\n\n## Changelog\n\n- 0.1.2 - 2021.01.19\n  - Fix for reading from file system\n- 0.1.1 - 2020.08.28\n  - Additional security (prevents from accidental execution)\n  - First release\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fevotecit%2Fpowershellmanager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fevotecit%2Fpowershellmanager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fevotecit%2Fpowershellmanager/lists"}