BranchesTags

Latest commit

History

23 Commits

Folders and files

NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md

Repository files navigation

Azure VM Quarantine and Inspection - PowerShell

Description

This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.

The script performs the following actions:

  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.

Prerequisites

  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.

Getting Started

Local Execution

  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.

CI/CD Pipeline Execution

  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.

Parameters

  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.

Usage

Local Execution

Execute the script in a PowerShell environment with the Azure PowerShell module installed.

# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"

CI/CD Pipeline

When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.

Cleanup and Rollback

The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.

Contributing

Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.

License

MIT

About

PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.

Resources

Readme
Activity

Stars

2 stars

Watchers

1 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
BranchesTags
Latest commit
History
23 Commits
Folders and files
NameName
Last commit message
Last commit date
.gitlab-ci.yml
.gitlab-ci.yml
CHANGELOG.md
CHANGELOG.md
IsolateVM.ps1
IsolateVM.ps1
README.md
README.md
Repository files navigation
Azure VM Quarantine and Inspection - PowerShell
Description
This PowerShell script is designed to isolate a specific Azure Virtual Machine (VM) by moving it to a new subnet and setting up Azure Bastion for secure access. It is crafted to work both as a standalone script for local execution and as part of a GitLab CI/CD pipeline.
The script performs the following actions:
  1. Authenticates with Azure using a service principal or interactive login.
  2. Retrieves the virtual network address space associated with the VM.
  3. Creates a new subnet for isolation purposes.
  4. Creates a separate subnet for the Azure Bastion host.
  5. Generates a new Network Security Group (NSG) and configures it to allow Bastion Host access only.
  6. Associates the NSG with the isolation subnet.
  7. Provisions a new public IP address for the Bastion host.
  8. Quarantines the target VM by moving it into the isolation subnet.
  9. Establishes a new Bastion host for secure connectivity.
Prerequisites
  • Azure PowerShell Module (Az Module)
  • An active Azure subscription with appropriate permissions.
  • For CI/CD pipeline execution: GitLab with a configured runner.
Getting Started
Local Execution
  1. Authentication: The script checks for an existing Azure session and prompts for authentication if needed.
  2. Subscription and Resource Group: Input your Azure Subscription ID and the name of the resource group containing the VM.
  3. Virtual Machine Selection: Specify the VM name you intend to isolate.
  4. Network Configuration: Provide CIDR blocks for the isolation and Bastion subnets.
  5. Execution: Run the script in a PowerShell environment. The script creates network resources and reconfigures the VM.
CI/CD Pipeline Execution
  1. Configuration: Set the necessary environment variables in your GitLab CI/CD settings.
  2. Automation: The gitlab-ci.yml file orchestrates the script execution based on the provided variables.
Parameters
  • subscriptionId: Azure Subscription ID.
  • VMresourceGroupName: Resource Group name containing the VM.
  • vmName: Name of the VM to isolate.
  • subnetRange: CIDR for the new isolation subnet.
  • bastionSubnet: CIDR for the Bastion subnet.
Usage
Local Execution
Execute the script in a PowerShell environment with the Azure PowerShell module installed.
# Example command to execute the script, it will ask the user for the values it requires
.\IsolateVM.ps1
# Alternatively, you can pass in those values at runtime as follows
.\IsolateVM.ps1 -subscriptionId "your-subscription-id"-VMresourceGroupName "your-rg-name"-vmName "your-vm-name"-subnetRange "your-subnet-range"-bastionSubnet "your-bastion-subnet"
CI/CD Pipeline
When running the pipeline manually, it will ask for user input parameters for use within the script. GitLab CI/CD pipeline will then automatically execute the script based on the defined stages in gitlab-ci.yml.
Cleanup and Rollback
The script maintains a hashtable to track the creation of resources. In case of an error, it provides information about which resources were created and might need to be manually cleaned up.
Contributing
Feel free to fork this repository and submit pull requests or issues for any enhancements or fixes.
License
MIT
About
PowerShell script to target a VM and setup an isolated subnet for it to be moved into and inspected by a SoC team.
Resources
Readme
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Contributors
Languages