windows_sandbox/.github/workflows/windows-workflow.yml at master · githubfoam/windows_sandbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171

name: "windows CI workflow"

on:
  push:
    branches: [ master ]
  schedule:
      - cron:  '0 0 1 * *' ##execution of a task in the first minute of the month


jobs:

  windows-latest-pwsh-scripts:
    name: "windows-latest Microsoft Windows Server 2019 Datacenter pwsh"
    runs-on: windows-latest
    steps:
    - name: Checkout
      uses: actions/checkout@v1
    - name: "silent install firefox"
      run: .\scripts\Install_FireFox.ps1
      shell: pwsh
    - name: "test verbose"
      run: .\scripts\Test_Verbose.ps1
      shell: pwsh
    - name: "windows version"
      run: .\scripts\Windows_Version.ps1
      shell: pwsh


  windows-latest:
    name: "windows-latest Microsoft Windows Server 2019 Datacenter"
    runs-on: windows-latest
    steps:
    - name: Checkout
      uses: actions/checkout@v1
    - name: "check if server is virtual"
      run: Systeminfo | findstr /i model
    - name: "check the PROCESSOR_ARCHITECTURE environment variable.64-bit systems will say AMD64 and 32-bit systems should say x86"
      run: wmic OS get OSArchitecture
    - name: "osfingerprinting"
      run: systeminfo | more
    - name: "display all processes, executable path"
      run: wmic process list full
    - name: "list of running services"
      run: tasklist
    - name: "list of all processes along with their corresponding PID, and services that are tied to them"
      run: tasklist /svc
    - name: "look for unusual services"
      run: net start
    - name: "query unusual services"
      run: sc query

  windows-2019:
    name: "Microsoft Windows Server 2019 Datacenter"
    runs-on: windows-2019
    steps:
    - name: Checkout
      uses: actions/checkout@v1
    - name: "check if server is virtual"
      run: Systeminfo | findstr /i model
    - name: "check the PROCESSOR_ARCHITECTURE environment variable.64-bit systems will say AMD64 and 32-bit systems should say x86"
      run: wmic OS get OSArchitecture
    - name: "osfingerprinting"
      run: systeminfo | more
    - name: "display all processes, executable path"
      run: wmic process list full
    - name: "list of running services"
      run: tasklist
    - name: "list of all processes along with their corresponding PID, and services that are tied to them"
      run: tasklist /svc
    - name: "look for unusual services"
      run: net start
    - name: "query unusual services"
      run: sc query

  windows-2019-shells:
    name: "Microsoft Windows Server 2019 Datacenter shells"
    runs-on: windows-2019
    steps:
    - name: Checkout
      uses: actions/checkout@v1
    - name: "check if server is virtual"
      run: Systeminfo | findstr /i model
    - name: "check the PROCESSOR_ARCHITECTURE environment variable.64-bit systems will say AMD64 and 32-bit systems should say x86"
      run: wmic OS get OSArchitecture
    - name: "osfingerprinting"
      run: systeminfo | more
    - name: "display all processes, executable path"
      run: wmic process list full
    - name: "list of running services"
      run: tasklist
    - name: "list of all processes along with their corresponding PID, and services that are tied to them"
      run: tasklist /svc
    - name: "look for unusual services"
      run: net start
    - name: "query unusual services"
      run: sc query
    - name: "Display the path" #Example running a script using bash
      run: echo $PATH
      shell: bash
    - name: "Display the path" #Example running a script using Windows cmd
      run: echo %PATH%
      shell: cmd
    - name: "Display the path" #Example running a script using PowerShell Core
      run: echo ${env:PATH}
      shell: pwsh
    - name: "Display the path" #Example running a python script
      run: |
          import os
          print(os.environ['PATH'])
      shell: python

  windows-2016:
    name: "Microsoft Windows Server 2016 Datacenter"
    runs-on: windows-2016
    steps:
    - name: Checkout
      uses: actions/checkout@v1
    - name: "check if server is virtual"
      run: Systeminfo | findstr /i model
    - name: "check the PROCESSOR_ARCHITECTURE environment variable.64-bit systems will say AMD64 and 32-bit systems should say x86"
      run: wmic OS get OSArchitecture
    - name: "osfingerprinting"
      run: systeminfo | more
    - name: "display all processes, executable path"
      run: wmic process list full
    - name: "list of running services"
      run: tasklist
    - name: "list of all processes along with their corresponding PID, and services that are tied to them"
      run: tasklist /svc
    - name: "look for unusual services"
      run: net start
    - name: "query unusual services"
      run: sc query

  windows-2016-shells:
    name: "Microsoft Windows Server 2016 Datacenter shells"
    runs-on: windows-2016
    steps:
    - name: Checkout
      uses: actions/checkout@v1
    - name: "check if server is virtual"
      run: Systeminfo | findstr /i model
    - name: "check the PROCESSOR_ARCHITECTURE environment variable.64-bit systems will say AMD64 and 32-bit systems should say x86"
      run: wmic OS get OSArchitecture
    - name: "osfingerprinting"
      run: systeminfo | more
    - name: "display all processes, executable path"
      run: wmic process list full
    - name: "list of running services"
      run: tasklist
    - name: "list of all processes along with their corresponding PID, and services that are tied to them"
      run: tasklist /svc
    - name: "look for unusual services"
      run: net start
    - name: "query unusual services"
      run: sc query
    - name: "Display the path" #Example running a script using bash
      run: echo $PATH
      shell: bash
    - name: "Display the path" #Example running a script using Windows cmd
      run: echo %PATH%
      shell: cmd
    - name: "Display the path" #Example running a script using PowerShell Core
      run: echo ${env:PATH}
      shell: pwsh
    - name: "Display the path" #Example running a python script
      run: |
          import os
          print(os.environ['PATH'])
      shell: python