script to alert if a scheduled task with specific name exists and is enabled.

Download JSON Download Python

Ratings

Release Time

03/14/2022

Downloads

617 times

Update Time

11/20/2024

Views

484 times

Share-it:

Tags

Script monitroing

NOTE : Run as Local System User.

PARAMETERS:

1. Change the parameter of the variable taskname to whatever name you want to search in the list of sheduled tasks.

For example:

if you want to search whether a scheduled task with a name 'google' exists then you can give the parameter of the variable taskname as google.

if a scheduled task with a name "chrome google' exists and you give the parameter as Goog or oogle like that, the alert will show the scheduled task 'chrome google' and its status as result.

Procedure's Instructions

#To define a particular parameter, replace the 'parameterName' inside itsm.getParameter('parameterName') with that parameter's name
taskname = itsm.getParameter('taskname') # define the taskname here
import subprocess
import sys
def alert(arg): 
   	sys.stderr.write("%d%d%d" % (arg, arg, arg))

def ecmd(command):   
    from subprocess import Popen, PIPE
    import ctypes
    import re
    
    class disable_file_system_redirection:
        _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
        _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
        def __enter__(self):
            self.old_value = ctypes.c_long()
            self.success = self._disable(ctypes.byref(self.old_value))
        def __exit__(self, type, value, traceback):
            if self.success:
                self._revert(self.old_value)
    
    with disable_file_system_redirection():
        obj = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
        out, err = obj.communicate()
        ret=obj.returncode
        if ret==0:
            if out:
                result = out.strip().splitlines()
                mapping = {}
                lst = []
                integer = 0
                check = False
                for i in result:
                    a=i.split(":")
                    if i.strip()=="":
                        mapping[integer] = lst
                        lst = []
                        integer+=1
                    else:
                        lst.append(a)
                else:
                    mapping[integer] = lst
                for i in mapping:
                    s = 0
                    for e in mapping[i]:
                        if e[0]=='TaskName':
                            if re.findall(taskname,e[1],re.IGNORECASE) and s==0:
                                print(e[0]+" :"+e[1].strip())
                                s+=1
                        if e[0]=="Scheduled Task State" and e[1].strip()=="Enabled":
                            if s!=0:
                                print(e[0]+" :"+e[1].strip())
                                check=True
                                break
                else:
                    if check:
                        alert(1)
            else:
                print(ret)
                alert(0)
        else:
            if err:
                print(err.strip())
                alert(0)
            else:
                print(ret)
                alert(0)
ecmd("schtasks /query /fo LIST /v")

Comments

No Comments.

script to alert if a scheduled task with specific name exists and is enabled.

Comments

Leave a Comment