CyberOps Remote Toolkit

Türkçe

A cyber-themed PowerShell WPF toolkit for authorized Windows and Active Directory remote administration using Microsoft Sysinternals PsExec.

This project is intended for system administrators and IT support teams working on systems they own or are authorized to manage.

Current release

• Release: v6.6.1
• Build: 2026.09.07.22
• Main file: CyberOps-Remote-Toolkit-WPF-v6.6.ps1

Technology

Component	Technology
Main application	Windows PowerShell 5.1
User interface	WPF / XAML
Launcher	VBScript (.vbs)
Remote execution	Microsoft Sysinternals PsExec
Target platform	Windows 10/11 and Windows Server
Project license	MIT

GitHub will primarily classify this repository as PowerShell. The launcher is written in VBScript, and the interface is defined with XAML embedded in the PowerShell script.

Purpose

CyberOps Remote Toolkit collects frequently used Windows support and administration actions in one graphical interface. It is designed to reduce repetitive command entry during help-desk and on-site support work.

Main features

• Select a target by computer name, IP address, or Active Directory user.
• Run low, normal, or high-speed network discovery with live results, elapsed time, progress, cancellation, and in-progress fast-mode switching.
• View grouped AD computer inventory with online/offline state, IP address, and signed-in user sessions.
• Use a simplified two-level CyberOps navigation structure.
• Open PsExec console, Remote Desktop, C$ share, Computer Management, and RustDesk connections.
• Open a link, file, or folder in the interactive user's session.
• Exchange temporary two-way live chat messages or start a selected-user group chat.
• Lock, sign out, restart, or shut down a managed computer.
• Run ping, tracert, and DNS queries from the target computer; inspect network configuration and port connections; flush the target DNS cache.
• Manage system, disk, hardware, process, service, software, startup, and Windows Update data in CyberOps dashboards.
• Add or remove IP/UNC printers and list printer drivers installed on the target.
• Remotely install EXE/MSI packages and uninstall software with a registered removal identity.
• Group identical system and application events and display their occurrence counts.
• Run Group Policy refresh, SFC, DISM, and bulk AD computer actions.
• Display auto-refreshing CPU, RAM, disk, GPU, temperature, and process telemetry in System Cockpit.
• Open every administrator-side secondary window on the monitor containing the main application.

Feature availability depends on Windows edition, permissions, firewall policy, Active Directory availability, and the target computer's configuration.

Requirements

• Windows PowerShell 5.1 and .NET Framework with WPF support.
• Local administrator rights on the management computer.
• Administrative permission on each target computer.
• A trusted LAN, domain, or VPN connection to the target.
• SMB/ADMIN$ access and the firewall rules required by PsExec.
• PsExec.exe, downloaded separately from Microsoft.
• Active Directory PowerShell tools/RSAT for features that search Active Directory.

Installation

1. Download or clone this repository.
2. Download PsExec/PsTools from the official Microsoft Sysinternals page.
3. Extract PsExec.exe into the same folder as the .ps1 and .vbs files.
4. Start CyberOps-Toolkit-v6.6-BASLAT.vbs.
5. Approve the Windows UAC prompt when administrator rights are requested.

To use automatic RustDesk installation, download the official RustDesk MSI package separately and place it beside the .ps1 file. RustDesk packages are not redistributed in this repository.

The repository intentionally does not include PsExec.exe. Microsoft does not permit third-party redistribution of Sysinternals utilities. See THIRD_PARTY_NOTICES.md.

Basic use

1. Choose Node / IP or AD User.
2. Enter or select the target.
3. Select Connect / Find.
4. Use only the actions permitted by your organization's policies.
5. Review the Secure Terminal output for success and error details.

Privacy and security

• Do not place credentials, access tokens, private keys, internal documentation, screenshots, or exported logs in this repository.
• Redact domain names, usernames, computer names, public/private IP addresses, and customer information before opening an issue.
• Review the scripts before use and test them in a non-production environment.
• Use the minimum administrative privileges required for the task.
• Remote administration behavior can be detected by endpoint-security products. Do not create exclusions unless your security team has reviewed and approved the exact files and hashes.
• See SECURITY.md for vulnerability reporting and operational guidance.

Third-party software

PsExec is a Microsoft Sysinternals product and is not part of this project's MIT license. Download and license it separately from Microsoft. Microsoft, Windows, PowerShell, Sysinternals, and PsExec are trademarks or product names of their respective owner.

License

The PowerShell and VBScript source code in this repository is licensed under the MIT License. Third-party software, including PsExec.exe, is excluded.

Disclaimer

This project is provided without warranty. You are responsible for authorization, backups, testing, policy compliance, and the consequences of remote actions. The project is not affiliated with or endorsed by Microsoft or Sysinternals.