MDE ‐ Check WCF and or Network Protection

Summary

Situation: Customer is trying to check if they need to block or allow a URL as an IoC.

Solution: Use the following PowerShell script to check if the URL is accessible in their environment with current configurations. This will check to see if its coming from Web Content Filtering or Network Protection and produce a csv with the results.

Script and Test File

• WCF-SiteCheck.ps1
• sites.csv

Instructions

1. Download the script and test file above
2. Open the script and change the location to where you want of the two variables to the location where you have the sites.csv and where you want the output to be.

3. Run the script by simply calling the name in PowerShell. *** Note: I am using PowerShell 7

4. Your out from the script should look like this:

Your CSV output