# Check Execution Policy
Get-ExecutionPolicy

# Download Sysinternals Accesschk
. "C:\NTK\WD\AaronLocker\Support\DownloadAccesschk.ps1"

# Create initial scan
. "C:\NTK\WD\AaronLocker\Create-Policies.ps1"

# explore Writable paths
explorer C:\NTK\WD\AaronLocker\ScanResults

# Find any sensitive files in writable folders and output to Excel
. "C:\NTK\WD\AaronLocker\Scan-Directories.ps1" -WritableWindir -WritablePF -Excel

# Find Non-Default Root folders
. "C:\NTK\WD\AaronLocker\Scan-Directories.ps1" -FindNonDefaultRootDirs

# Find sensitive files in specific root folders
. "C:\NTK\WD\AaronLocker\Scan-Directories.ps1" -DirsToSearch C:\SysinternalsSuite\ -Excel

# Search ProgramData for sensitive files
. "C:\NTK\WD\AaronLocker\Scan-Directories.ps1" -SearchProgramData -Excel

# Customize before re-generating
code C:\NTK\WD\AaronLocker\CustomizationInputs

# Re-generate AppLocker policy
. "C:\NTK\WD\AaronLocker\Create-Policies.ps1" -Excel

# Prepare Event Log and Services
. "C:\NTK\WD\AaronLocker\LocalConfiguration\ConfigureForAppLocker.ps1"

# Apply policy in Audit
. "C:\NTK\WD\AaronLocker\LocalConfiguration\ApplyPolicyToLocalGPO.ps1" -AuditOnly

# Enforce Policy
. "C:\NTK\WD\AaronLocker\LocalConfiguration\ApplyPolicyToLocalGPO.ps1"

# Check Local Security
SecPol.msc
