psexec -s -i 0 \\computername c:\reskit\procmon /backingfile c:\temp\procmon /quiet

and then to stop collection:

psexec -s -i 0 \\computername c:\reskit\procmon /terminate

It is critically important that you stop the procmon collection process by using the terminate command. If you simply kill the process or reboot while it is running the log file will be corrupted and unusable.

openssl x509 -text -in cert.pem

The following command return specific pieces of information from the certificate in question:

# who issued the cert?
openssl x509 -noout -in cert.pem -issuer

# to whom was it issued?
openssl x509 -noout -in cert.pem -subject

# for what dates is it valid?
openssl x509 -noout -in cert.pem -dates

# the above, all at once
openssl x509 -noout -in cert.pem -issuer -subject -dates

# what is its hash value?
openssl x509 -noout -in cert.pem -hash

# what is its MD5 fingerprint?
openssl x509 -noout -in cert.pem -fingerprint

tshark -T fields -e http.user_agent

netsh advfirewall firewall show rule name=all

If Wscript.Arguments.Count = 0 Then
  Wscript.Echo "Must supply Username."
  Wscript.Quit(1)
End If

username= Wscript.Arguments(0)
' Bind to Active Directory object.
On Error Resume Next

stradspath=CheckForUser(username)
wscript.echo stradspath

Set objUser = GetObject("LDAP://" & strAdsPath)
Set objLastLogon = objUser.Get("lastLogonTimestamp")

intLastLogonTime = objLastLogon.HighPart * (2^32) + objLastLogon.LowPart
intLastLogonTime = intLastLogonTime / (60 * 10000000)
intLastLogonTime = intLastLogonTime / 1440

Wscript.Echo "Last logon time: " & intLastLogonTime + #1/1/1601#

function CheckForUser(samAccountName)
    dtStart = TimeValue(Now())
    strUserName = samAccountName
    Set objConnection = CreateObject("ADODB.Connection")
    objConnection.Open "Provider=ADsDSOObject;"

    Set objCommand = CreateObject("ADODB.Command")
    objCommand.ActiveConnection = objConnection

    objCommand.CommandText = _
        ";(&(objectCategory=*)(cn=" & strUserName & "));distinguishedName,sAMAccountName;subtree"

    Set objRecordSet = objCommand.Execute

    If objRecordset.RecordCount = 0 Then
        WScript.Echo "sAMAccountName: " & strUserName & " does not exist."
	wscript.quit
    Else
        'WScript.Echo strUserName & " exists."
    End If
    'wscript.echo objRecordset(0)
    'wscript.echo "sAMAccountName: " & objRecordset(1)
    CheckForUser=objRecordset(0)
    objConnection.Close
    'WScript.Echo "Script completed in " & Second(TimeValue(now()) - dtStart) & " second or less."
End function

Set objUser = Nothing
Set objLastLogon = Nothing

The -b switch on netstat is a great thing. It shows you which process is using which socket or listening on a port. Used to was you could get this information using the -o switch which returned only the Process ID numbers (PID). Back in those olden days of yore I wrote my portbuster script which show process names for each listening port. Now since vista using the -b switch requires elevation. Also, the -b switch puts the process name on different lines than the ip information which makes the output un-grepable. One way to get around this is to adapt my portbuster script to show process name for all established connections. That is what I have done:

connected-procs
============

@echo off
for /f "skip=4 tokens=1,2,3,4,5" %%i in ('netstat -a -n -o^|findstr ESTABLISHED') do (
if %%i==TCP for /f "tokens=1-3" %%u in ('tasklist /fi "PID eq "%%m /nh /svc') do echo %%u,%%i,%%j,%%k,%%v
)

for /f %i in ('netsh dhcp server \\MYDHCPSERVERNAME show scope ^|findstr "255.0"') do netsh dhcp server \\MYDHCPSERVERNAME scope %i show clients

for /f %i in ('netsh dhcp server \\MYDHCPSERVERNAME show scope ^|findstr "255.0"') do netsh dhcp server \\MYDHCPSERVERNAME scope %i show reservedip