A collection of real-world security and IT automation scripts built over 10+ years in cybersecurity. Used in production environments for vulnerability management, endpoint compliance, and security operations.
cveSearch.py - Queries Tenable.io API for specific CVEs. Outputs Plugin ID, Plugin Name, Severity, Vulnerability State, VPR score, and asset count. Great for rapid CVE exposure checks.
TenableIO_exportvulns.py - Exports vulnerability scan results from Tenable.io to a zipped CSV. Filters by asset tags, severity, and date range. Includes VPR scores, exploit availability, CPE, and full asset metadata.
getAssetID.py - Looks up Tenable.io asset records by hostname and exports UUID, FQDN, IP, and OS to CSV. Useful for correlating scan data with asset inventory.
get_cisa_plugins.py - Pulls CISA Known Exploited Vulnerabilities catalog and cross-references against Tenable plugin IDs.
get_cisakEL.py - Retrieves the full CISA KEV list for threat prioritization workflows.
tagAssets.py - Tags assets in Tenable.io for organized scan targeting and reporting.
CheckChromeDetectionScript - Detects Chrome installation and configuration status across managed endpoints for compliance reporting.
CheckChromeRemediationScript - Remediates Chrome browser configuration issues on managed endpoints.
Test-WingetUpgrade - PowerShell script that tests Winget package upgrades on Windows endpoints for patch automation workflows.
install_zoom_remotely.py - zsh script for silent remote Zoom installation on macOS via Jamf or MDM. Validates SHA-256 checksum before installing, aborts if the app is running.
get_device_compliance_status - Retrieves device compliance status from endpoint management platforms.
fix_allowed_null_session - Fixes the AllowNullSession registry setting on Windows, closing a common lateral movement vector.
fix_enabled_auto_user_logon - Disables automatic user logon on Windows endpoints, remediating a common credential exposure misconfiguration.
get_asset_principal_name_PS - PowerShell script to retrieve asset principal names from directory services.
update_intune_group - Updates Microsoft Intune device group membership programmatically.
Python | PowerShell | zsh | Tenable.io API | CISA KEV | Microsoft Intune | Jamf
Written by a cybersecurity professional with 10+ years in IT and security. These scripts were built to solve real enterprise problems, not tutorials.