Windows and Linux endpoint management, PowerShell automation, and ET Ducky
I’m a systems engineer with 15 years in IT operations, more than 10 of them in enterprise endpoint management on Windows and Linux. Most of my PowerShell goes into patching, event log analysis, and fleet scripting.
I build ET Ducky, an RMM that reads the kernel event stream on each endpoint (ETW on Windows, eBPF on Linux). My open source tools, including ProcDelta and ProviderExplorer, are on GitHub.
A PC that turns itself on at night leaves a record in the System log every time it does. Windows writes one event when the PC goes to sleep and another when it wakes up. The wake event names the device or timer that woke it. This article builds Get-SleepWakeHistory, a function that reads those two …
