Skip to main content
  • EN

YARA and Script Library

Download featured YARA rules, browse code samples or contribute your own scripts

  • 178 Topics
  • 986 Comments
178 Topics
D
ddomaskComes here often
posted in YARA and Script Library
List Source Region/Subscription Information for Restore Points from External Repo Backup Copies

So, this is definitely a deep edge case if you could not tell from the title, if you could even figure out the situation from the title :)But since I went down this rabbit hole for a case, figured I’d share it for people getting deep into automation and the Veeam Public Cloud Backups who are following 3-2-1 rule and making Backup Copies of these from their External Repositories. Even if you never need to solve this particular use case, I suppose it’s a good example of what you can actually learn about a backup and how to properly parse data without nasty string munging.Issue: Backup Copies sourced from External Backups don’t have a UI field to associate the Restore Points with the original backed up machine’s public cloud information like Subscription, Region, etc.Where this likely becomes an issue is when you heavily automate regional deployments and may have identical infrastructures set up uniquely for individual regions. (e.g., you deploy machines with same names for regions that o

401
Chris.Childerhose
Chris.Arceneaux
Chris.ArceneauxVeeam MVP
posted in YARA and Script Library
VSPC Sample Usage Report

One of the first scripts I wrote after I joined Veeam was one that produced a license usage report using the Veeam Availability Console API. Since then, a lot has changed! The product was rebranded to Veeam Service Provider Console (VSPC) and it’s API was greatly updated in a complete rewrite!That change occurred a couple years ago... As such, it was definitely long overdue for this script to be reworked so it could leverage this amazing new API! This script uses minimal API calls to retrieve current point in time license usage for every company in VSPC. On top of that, if the company is managed by a reseller, reseller information will be included in the output.Developer’s notes...This script is meant to be a stepping stone as the framework can easily be used in other automations. I tried to keep most of the code modular by design so folks can use the script as-is or take the pieces you need for your custom Veeam integration. It can also serve as a reference on how to use Asynchronous

2332
victorwu
L
ldasilvaNew Here
asked in YARA and Script Library
Enable encryption for all existing backup jobs using powershell

Hi guys, I was wondering if it is possible to enable the encrypt option for all backup jobs using powershell. I already have created the encryption key/password.  Your help would be appriciated. 

108710
Scott
Scott
ScottVeeam Legend
posted in YARA and Script Library
Script to remove data from a share monthly.

I have a lot of users that require a location accessible to everyone to share files on a temporary basis. (non confidential type info) My issue is that nobody likes to delete anything here… EVER! After having to clean it out multiple times I figured I’d run a scheduled task for a PowerShell script to clean the folder out on the first of every month.  The issue is now people wondering why the files were deleted event though it was explained and called Temporary_Data_Transfer. lol I created a folder titled  “_Instructions” at the top that won’t be removed by the script and the underscore keeps it at the top.  There is a document in it so users can review the date the folder is cleaned out and states that files will be deleted monthly. This has really helped clear things up with people not knowing their files will be removed. The script omits clean up of that folder by increasing the date to make it appear as a new file.  The also script keeps a log of deleted files so when someone is ask

2132
Scott
Mildur
MildurInfluencer
posted in YARA and Script Library
Verify access to the protected Teams API

Update from @Chris.Arceneaux (Nov 7th, 2022):Chris has created a new script to automate the commands described in my topic. Thank you very much. :)https://github.com/VeeamHub/powershell/tree/master/VB365-CheckTeamsProtectedAPI______________________ My code has the added benefit of not requiring parameters (TenantID/AppId/CertThumbprint) to be specified as long as the script is executed on the VB365 server. It also automagically installs required PowerShell module(s). This script is about KB4322 (Using Microsoft Graph Export API for Teams) Recently, we were asked in the R&D forum, how much time Microsoft will take, until they inform you, that you have been granted to access to the protected API’s.Unfortunately, it seems that Microsoft will not inform you per Mail about the successful approvement. In Microsoft Docs, their statement is to use your application to verify if your request has been approved. Microsoft will only write you an email, if they have more questions about the requ

12016
Mildur
RK99
RK99Experienced User
asked in YARA and Script Library
How Application Aware Image Processing Will VMWARE(Virtual Domain Controller) Configured on Top Veeam will take Backup

Incase of Multiple VMs available on top of Veeam how AAIP will help and Support

741
C
Scott
ScottVeeam Legend
posted in YARA and Script Library
Changing CPU or Memory on a VMware VM with a scheduled task.

As always run it on a test VM while you are watching it, but this script will power down, modify the CPU and/or Memory on a VM, then power it back up.  This has been VERY handy for Changing resources on my VMs after hours. Like adding memory to a Veeam Virtual proxy server after a backup window ends.  While I borrowed most of the script from the internet, there wasn’t much about running as a scheduled task which was can cause confusion to many people from what I read.  Here is a few tips to run the PowerShell script as a scheduled task.  Step 1, Use the script below to create a PS1 file. I named mine VM_MEMORY_CPU_COUNT_HQ.PS1     Keep in mind the name and location when you add the arguments below.Step 2, Create a scheduled task in windows at specified time. Step 3, set action to run a program. You don’t want to run the script, you want to run Powershell.exeexample - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe  Step 4, Configure the options\arguments. I put 0 if I want no

12982
vAdmin
R
rdixon01New Here
asked in YARA and Script Library
Script for job config

Does anyone have a script and willing to share that list the Veeam backup job name + it’s start time+ the proxy server name+ it’s repository name.

3273
MattM
K
KirmisNew Here
asked in YARA and Script Library
Veeam 365 | SharePoint personal sites ?

Hello Veeam,In Veeam 365 backup for SharePoint online, I see that can backup the SP online sites and also has a category for “Personal Sites”.Can anyone explain what is these Personal Sites and where can I find them in SharePoint admin portal?I couldn't found any explanation even in Veeam documentation about Personal Sites.https://helpcenter.veeam.com/docs/vbo365/guide/back_up_sites.html?zoom_highlight=personal+sites&ver=60 Thank you in advance,Nikos 

3163
K
StefanZi
StefanZiComes here often
posted in YARA and Script Library
Get last SQL transaction log session

How to get the start and end time of the last SQL log backup session?I just got this question from one of my customers and it’s not soo easy to get there, so I thought it might be useful to share a basic example. You’ll have to get the working task session and read & parse the logs for more details. $sql_base_job = "My SQL Server Job"$j = Get-VBRJob -Name $sql_base_job$SQLJob = $j.FindChildSqlLogBackupJob()$session = $SQLJob.FindLastSession()# Tasksessions will be per machine, I only have one$taskSession = Get-VBRTaskSession -Session $session$logBackupLogs = $taskSession.Logger.GetLog().UpdatedRecords$lastSessionStartLog = $logBackupLogs | ? { $_.Title.Contains("New transaction log backup interval started") } | Select -Last 1$lastSessionEndLog = $logBackupLogs | ? { $_.Title.Contains("Transaction log backup completed") } | Select -Last 1# Sanity check (Endtime > Starttime) might be good if a session was started but not yet finishedWrite-Output "Last log session start: " $lastSes

3226
mkevenaar
MattM
MattMExperienced User
posted in YARA and Script Library
NAS Backup Copy to Tape via Instant File Share Recovery

Since the introduction of NAS backup capability with v10 of Veeam Backup & Replication there have been many requests for tape support. But as we all know, Veeam’s NAS backup doesn’t support tape (yet?), neither as a primary nor as secondary (backup copy or archive) target.With v11 we got the new feature called “instant file share recovery” which lets us publish file shares directly from the backups previously created with NAS backup jobs. My colleague Uwe Groening recently came up with the idea to use these shares, published by instant file share recovery, as a source for file to tape jobs within Veeam. This way, it should be possible to create tape copies directly from existing file share backups. This makes a huge difference to other solutions that involve either reading data from the production share again or staging a restore on some (extra) storage prior to using “file to tape” from there.We discussed this idea in more detail and created a process (for a single NAS backup job)

295412
Scott
damien commenge
damien commengeVeeam Legend
posted in YARA and Script Library
Veeam backup microsoft 365 script audit

Hello, This is a script to audit VBM365. Feel free to say what you would like if it’s missing :) I know it’s not “complete” # =======================================================# NAME: VBM365audit.ps1# AUTHOR: Commenge Damien, Axians Cloud Builder# DATE: 11/07/2022## VERSION 1.0# COMMENTS: This script is created to Audit Veeam backup for microsoft 365# <N/A> is used for not available# =======================================================$date = (get-date -Format "dd_MM_yyyy_HH_mm")#Create directoryNew-Item -ItemType Directory -Path "C:\temp\VBM365Audit\$date" -Force | Out-Null#ReportPath$ReportPath="C:\temp\VBM365Audit\$date"#Report file HTML path$htmlReportPath = "$ReportPath\VeeamBackupMicrosoft365.html"$HTMLCSS = @'<style>body{color:black;font-family:Vinci Sans Light;font-size:0.79em;line-height:1.25;margin:5;}a{color:black;}H1{color:white;font-family:Verdana;font-weight:bold;font-size:20pt;margin-bottom:50px;margin-top:40px;text-align:center;background-color:#005E

4268
damien commenge
vChris
vChrisNot a newbie anymore
posted in YARA and Script Library
Powershell script - SQL Automated restore with NDF handling

Hello there,I have a customer who wanted to restore some DBs multiple time per month from production to different stages (dev, test ...) and doesn’t want to delegate the rights with EM or to the console to the devs (surprised Pikachu face). Nor spend hours behind their screen to do it themselves. So i created a script that can be scheduled (windows task) or triggered with their own automation tool.As the source databases are split with multiple NDF I had to figure it out. So here it is, it's far from "State of the Art" script but it does the job.(I have a "vaulted" version that can pick credentials from an encrypted file but I'm not that happy with it so here is the script without it. Feel free to improve it.)# Restore a specified SQL database to a specified folder on the same or different server, rename it, add it to an availability group.# Used, for example, to "restage" the prod database to Dev/Qual# Created by Christian Bocquet - https://www.linkedin.com/in/vchris/ on 11.07.2022# V

6431
T
SteveHeart
SteveHeartInfluencer
posted in YARA and Script Library
Powershell - VBR NAS Scanner

While presenting our powerful file share protection and recovery capabilities, I often show the Instant File Share Recovery feature. One possible purpose for this feature is scanning the share with an AV solution. For this, I created this script to be able to quickly show it to our customers and partners:https://github.com/yetanothermightytool/powershell/blob/master/vbr/vbr-nas-scanner/More to come....stay tuned 

1387
marcofabbri
Bulent.Tolu
Bulent.ToluComes here often
posted in YARA and Script Library
Gathering VBM365 Restore Sessions/Events via Powershell

Hello Everyone, one questions always get asked if it is possible to know “who has touched/restored what and when” to audit for compliance or for any other requirement. For Veeam Backup for Microsoft 365, there is already great information published in the post(s) and blog of Jorge, explaining all in very great detail: https://community.veeam.com/blogs-and-podcasts-57/vb365-restore-audit-the-definitive-guide-2557Possibly, where you need a quick dump of all restore activities (now!), you may also utilize PowerShell interacting with the RESTAPI of VBM365 and list all restore sessions and their events. And the script below is just an “example” to achieve such. You may play with all properties per your needs and create output as you require, even the modified output could even be used to feed into some other applications. (Currently it is only for v6)RestoreSession and RestoreSessionEvent is what we need to use mainly. The script finds the restore sessions, and then iterates through each of

1521
Chris.Childerhose
D
ddomaskComes here often
posted in YARA and Script Library
Tape Library Inventory Report

Hey all,Again, hope it’s not spam, but wanted to share some custom code that came up for the purpose of a case and let the community have it also (since why not?)Issue:You want to have an inventory of Current Tape Locations Library Association Other Tape Elements There isn’t really a “nice” VeeamOne report for this (vOne just reports on Vaulted Tapes), and checking the tape WebUI isn’t always convenient nor is checking the Veeam Tape node.If you find a need for this, check this out:using namespace System.Collections.Genericfunction Get-VBRTapesInLibrary { param( [Veeam.Backup.PowerShell.Infos.VBRTapeLibrary[]]$Library ) $TapesInLibrary = Get-VBRTapeMedium | Where-Object {$_.LibraryID -eq $Library.id} return $TapesInLibrary}function New-TapeLocationPropertiesObject { param( [Veeam.Backup.PowerShell.Infos.VBRTapeMedium[]]$tapemedium ) $TapeBarcode = $tapemedium.Barcode $TapeName = $tapemedium.Name $TapeLocation = $tapemedium.Location.Type if($tapemedium.Location.Type -eq "Drive"){

4082
Chris.Childerhose
D
ddomaskComes here often
posted in YARA and Script Library
Retention Restore Age Report

Hopefully not spam, but occasionally I’ll see questions from Support Cases on “Can we do X with Powershell” and it gets my interest enough that I like to pump out a quick script as proof of concept.As a quick reminder, Veeam Support does not produce custom code on demand, so cases aren’t the right route for getting help with scripts or ideas. Such requests are routed to the forums for assistance.But, I’d feel bad not sharing the results of my curiosity as maybe someone would find it useful. Scenario:We ended up with a case where a client wanted to help gauge where they should keep their retention at based on the average age of restore requests. This is a great and proactive question and I really liked the idea of checking one’s retention policies against real-world use in their environment.VeeamOne has a great report for this already with the Restore Operator Activity, and I recommend you use that if you are licensed for VeeamOne. If not however, this is fairly fast and easy script to

1544
regnor
P
PresleyVNNew Here
asked in YARA and Script Library
SQL Commands Veeam

SQL Commands for Veeam to be able to link a Backup Job that was done before the Veeam B&R Server was migrated to a new server. and Perform a Backup Copy Job.

67611
vNote42
k00laidIT
k00laidITVeeam Vanguard
posted in YARA and Script Library
kb3067-validation.ps1 script

<#.SynopsisTo be used after running the iland-kb3067.ps1 to verify that all data has been evacuated from the source repository. As logging is done by user it can be hard to ensure all data has moved from the Data Management job session logs..NotesVersion: 1.0Author: Jim Jones, @k00laidITModified Date: 5/23/2022.EXAMPLE.\kb3067-validation.ps1#>Import-Module Veeam.Archiver.PowerShell#Organization selection$orgs=Get-vboorganization | Sort-Object Namefor($i=0; $i -lt $orgs.count; $i++){write-host $i. $orgs[$i].name}$organisationNum = Read-Host "Enter organisation number"$vboOrg = $orgs[$organisationNum]$orgjobs = $vboOrg | get-vbojob[System.Collections.ArrayList]$orgrepos = @()foreach ($orgjob in $orgjobs) { $repo = $orgjob.repository $output = [PSCustomObject]@{ repoName = $repo } $orgrepos += $output }#Source Repository selection$sourcerepo = $orgrepos#$sourcerepo=Get-VBORepository | Sort-Object Namefor($i=0; $i -lt $sourcerepo.co

1231
Chris.Childerhose
Chris.Arceneaux
Chris.ArceneauxVeeam MVP
posted in YARA and Script Library
VB365 Restore Portal Setup Scripts

Here’s a collection of scripts that can be used to automate the setup and configuration of the Veeam Backup for Microsoft 365 Restore Portal. These scripts can be used for VB365 environments protecting a single Microsoft 365 Organization and for those with multiple Microsoft 365 Organizations in a multi-tenant setup (like in a Service Provider scenario).For more detailed information, please follow the VeeamHub link:https://github.com/VeeamHub/powershell/tree/master/VB365-RestorePortalSetup

6263
marcofabbri
SteveHeart
SteveHeartInfluencer
posted in YARA and Script Library
Powershell - VBO Health Check

Update Jan 13th - Latest version available on https://github.com/yetanothermightytool/powershell/tree/master/vbo/vbo-health-checker***It's always recommended to open a support case as soon you're facing an issue with Veeam Backup for Microsoft Office 365. But as systems engineers, we somehow always want to know what happens under the hood That's why I started writing a VBO Health Check script which quickly gives some useful information about the health of a Veeam Backup for Microsoft 365 setup. The script checks and reports possible issues/misconfigurations:    - Backup Job Status per Job / Number of failed job    - License expiration date    - Check logs if throtthling occured on MS side    - Possible slow backup due to slow backup repository    - Proxy stuff (min. recommended CPU and Memory)    - Check Windows event log for low memory conditions        - Logfile with the findingsLogfile gets stored in “C:\Scripts\Veeam\vbo\vbo_healthcheck_<computername>.log”Note: The script is

157715
SteveHeart
k00laidIT
k00laidITVeeam Vanguard
posted in YARA and Script Library
Get-VeeamDistroSvc.ps1

#Requires -Version 5.1 -PSEdition Desktop<#.SynopsisReports on a given list of AD servers if they have the VeeamDistributionSvc running and it's startType. This is in response to Veeam KB4288, https://www.veeam.com/kb4288.NotesVersion: 1.0Author: Jim Jones, @k00laidITModified Date: 3/13/2022.EXAMPLE.\Get-VeeamDistroSvc.ps1#>$svcName = "VeeamDistributionSvc"$servers = Get-ADComputer -filter * | where {$_.Name -like "*veeam*" -or $_.Name -like "*backup*" -or $_.Name -like "*whatever*"}[System.Collections.ArrayList]$mySvcInfo = @()foreach ($server in $servers) { $svcstatus = get-service -ComputerName $server.name -Name $svcName | select name, status, startType $quickInfo = New-Object psobject -Property @{ server = $server.name service = $svcstatus.Name status = $svcstatus.status startType = $svcstatus.startType } $mySvcInfo += $quickInfo}$mySvcInfo | select server, service, status, startType 

1762
regnor
SteveHeart
SteveHeartInfluencer
posted in YARA and Script Library
Powershell - Veeam Backup for Microsoft Azure Worker "Tagger"

You want to tag your Veeam Backup for Microsoft Azure Workers? Here's a script that will help you:https://github.com/yetanothermightytool/powershell/tree/master/vbazure/vbazure-workertag

632
JMeixner
E
EdxHComes here often
posted in YARA and Script Library
Veeam Easy Connect - making REST APIs a bit easier

Hi thereI’ve been working on a module to make connecting to Veeam APIs a bit easier when using Python (yes I am a big fan).https://github.com/shapedthought/veeam-easy-connectComments, issues and pull requests welcome.Cheers, Ed

12728
E
falkob
falkobVeeam Vanguard
posted in YARA and Script Library
Automatically create vSphere roles to use with Veeam Backup & Replication

Since I was tired to click roles together in vCenter server, I wrote a simple script on creating a vCenter role for Veeam with PowerCLI.This PowerShell / PowerCLI script lets you create a new vCenter server role with all the cumulative privileges and permissions to use them with Veeam Backup & Replication V10.The privileges used are based on the recommendations out of the Veeam Help Center which you can find here: Cumulative Permission for VMware vSphere – Veeam Help CenterSimply execute the script and follow the steps to fill in the relevant data like your vCenter server name, the username and your password. The script will then ask you to choose a name for your new role and automatically creates it. The script in actionThe script was successfully tested against:VMware vCenter 6.5 VMware vCenter 6.7 VMware vCenter 7.0You can read about this on my blog:https://www.virtualhome.blog/2020/04/22/creating-a-vcenter-role-for-veeam-with-powercli/The script is online at github: https://git

13367
Chris.Childerhose

Badge winners

Show all badges
Terms & Conditions