Scripts. Vetted scripts you can run across your fleet with Level.

macOS Unlock Device Script

Re-enable previously locked local user accounts on a macOS device to restore normal access privileges while retaining remote management through Level.

macOS Unauthorized Admins Script

Compare detected macOS admin accounts to your authorized list, instantly identifying any unexpected privilege assignments. Ideal for script-based monitoring and compliance automation in Level.

macOS Monitor - USB Drive Script

Detects attached USB drives on macOS by scanning system profiles. Alerts you when a USB device is present, enabling quick responses to potential security risks.

macOS Monitor - System Time Check

Ensures macOS endpoints maintain the correct time zone, network time sync, and NTP server configuration. Fixes issues automatically and alerts you when inconsistencies occur, helping prevent authentication, logging, and scheduling conflicts.

macOS Monitor - Firewall Script

Checks the firewall status on macOS systems and alerts if it’s disabled. Ideal for script-based monitoring in Level and automated security remediation workflows.

macOS Monitor - Device Standards Script

Automatically verify that macOS devices meet minimum CPU, RAM, and storage requirements using Level’s custom fields. Use this script within a script-based monitor to detect non-compliant devices and trigger alerts.

macOS Monitor - DNS Servers Script

Verifies that a macOS system’s DNS servers match a predefined allowed list, sending an alert if they deviate. Ideal for script-based monitoring and automated remediation in Level.

macOS Lock Device Script

Instantly log out and lock down all local user accounts on a macOS device, including root, to prevent unauthorized access while maintaining remote management through Level.

macOS Get Local Admins Script

Identify and list active admin users on macOS endpoints by verifying account expiration and lock status, ensuring quick oversight of privileged accounts for improved security and compliance.

macOS Endpoint Intelligence Gathering

A one-click script to collect key system and network details on a macOS device, including system info, local and public IPs, Wi-Fi networks, and ARP tables. Ideal for security audits and lost/stolen device tracking.

macOS Disk Cleanup Script

Frees up disk space by removing outdated temp files, cache folders, old downloads, system logs, and more. Keeps your Mac running smoothly with an automated cleaning process you can schedule or trigger on demand through Level.

macOS Disable Sleep on AC Power Script

Keep your Mac awake while plugged into power. This script disables default sleep behaviors, ensuring continuous remote access, uninterrupted processes, and stable system performance when running on AC power.

macOS Device Erase Script

Securely erase a macOS endpoint with a single command. This script removes user profiles, applications, browser data, credentials, Wi-Fi networks, SSH keys, and keychains.

macOS Delete/Disable Users Script

Disable or remove unwanted macOS user accounts with a single script. Leverage Level’s “UsersToDelete” variable for easy batch operations and pair it with script-based monitors or automations to maintain secure, compliant endpoints.

Windows Unlock Device Script

Effortlessly re-enable local and domain user accounts on a Windows device. Ideal for restoring normal operations after a security lockdown, unexpected lockouts, or account maintenance routines.

Windows Unauthorized Admins Script

Identify and alert on unauthorized Windows admin accounts by comparing detected users to an authorized admin list. Perfect for script-based monitors, ensuring your environment remains compliant and secure.

Windows Unauthorized Admin Login Script

Detects and alerts on unauthorized administrator logins within the last hour. Uses a custom field in Level to define authorized admins. Pair with a script-based monitor to automatically generate alerts for unauthorized access attempts.

Windows Monitor - USB Drive Script

Scans for USB drives on Windows endpoints. Alerts you if one is detected, enabling proactive security measures in sensitive environments.

Windows Monitor - System Time Check Script

Ensures Windows systems remain accurate by checking and setting time zones, verifying NTP server configuration, and confirming clock synchronization. Minimizes time drift with automated corrections and detailed logging.

Windows Monitor - Security Center Script

Checks antivirus and firewall settings on Windows devices via Security Center, flagging any disabled or missing security products. Ideal for a script-based monitor that triggers alerts or automatic remediation if an issue is found.

Windows Monitor - Restart Required Script

Checks Windows registry keys for pending reboot indicators. Alerts you when a system restart is required, ensuring updates and configuration changes don’t linger unaddressed.

Windows Monitor - Firewall Script

Checks if at least one Windows Firewall profile is enabled, returning success if a profile is active or an alert otherwise. Ideal for script-based monitors that notify you when firewall protection is missing.

Windows Monitor - Device Standards Script

Ensure all Windows devices meet minimum hardware standards by automatically checking CPU, RAM, and storage compliance using Level’s custom fields. Get alerts when devices fall below set requirements.

Windows Monitor - DNS Servers Script

Checks if the current DNS servers on a Windows machine match a predefined allowed list. Triggers an alert if there’s any discrepancy, helping IT Pros ensure proper network configuration.

Windows Monitor - Check SMART Disk Script

Checks Windows disks for early signs of failure using SMART data. Triggers an alert if any disk health status is not “Healthy,” allowing timely repairs or replacements to avoid data loss and downtime.

Windows Monitor - Check Disk Errors Script

Scans Windows event logs for common disk-related errors and alerts if issues are found. Ideal for script-based monitoring in Level to proactively address hardware or file system problems.

Windows Monitor - AV Script

Verifies that an antivirus recognized by Windows Security Center is active, alerting if no protection is detected or real-time scanning is disabled. Perfect for a script-based monitor and automated remediation in Level.

Windows Lock Device Script

Quickly logs out all user sessions and disables local or domain accounts on a Windows device. Ideal for emergency lockdown scenarios, stolen hardware, or security compliance efforts to protect systems from unauthorized access.

Windows Get Local Admins Script

Quickly identifies which user accounts are actively enabled in the local Administrators group on Windows systems. Use this script to maintain secure user privileges and ensure compliance with least-privileged access policies.

Windows Failed Login Script (Any User)

Detects and alerts on any failed login attempts within the last hour. Pair with a script-based monitor in Level to automatically generate alerts for potential unauthorized access attempts.

Windows Failed Admin Login Script

Detects and alerts on failed login attempts for administrator accounts within the last hour. Pair with a script-based monitor in Level to automatically generate alerts for potential unauthorized access attempts.

Windows Event Log Monitor Script

Searches Windows event logs for specific event IDs, severities, and sources. If matching events are found within the defined timeframe, it triggers an alert, making it easier to catch critical or error-level events in real time.

Windows Endpoint Intelligence Gathering

A one-click script to collect critical intel on a Windows endpoint, including system details, local and remote IPs, Wi-Fi networks, and ARP tables. Ideal for security audits and lost or stolen device tracking.

Windows Disk Cleanup Script

Frees up Windows storage by removing temp data, old downloads, and leftover update files. It logs actions, saves you time, and reclaims valuable disk space. Integrate with Level for quick or scheduled maintenance.

Windows Disable Sleep on AC Power Script

Prevent unwanted downtime by disabling sleep on AC power. This script adjusts Windows power settings to ensure systems remain awake and available when plugged in.

Windows Device Erase Script

Securely erase a Windows endpoint with a single command. This script removes user profiles, browser data, saved credentials, system restore points, event logs, and even wipes all fixed drives.

Windows Delete/Disable Users Script

Quickly remove or disable unwanted local user accounts on Windows devices, using a dynamic script variable for batch processing. Ideal for script-based monitors or automated compliance workflows in Level.

Windows Create Restore Point Script

Automatically create a Windows System Restore Point before or after critical actions. Ideal for scheduled automations, such as patching or security checks, ensuring a rollback option is available when needed.

Windows Admin Login Alert Script

Detects and alerts on administrator logins within the last hour. Pair with a script-based monitor in Level to automatically generate alerts for new admin logins.

Windows 11 Upgrade Hardware Check Script

Quickly assess whether your endpoints meet Windows 11 hardware requirements. This script validates disk space, memory, CPU specs, TPM version, and Secure Boot status to help you identify upgrade-ready devices.

Upgrade to Windows 11 Script

Effortlessly transition Windows 10 systems to Windows 11. This script downloads and launches the official Microsoft Installation Assistant, automates the upgrade process, and cleans up afterward—perfect for seamless OS migrations at scale.

Remove Bloatware Windows PowerShell Script

Quickly remove unnecessary Microsoft Store apps from Windows devices while preserving essential applications. This PowerShell script ensures a clean system by maintaining an audit log and allowing custom whitelist configurations.

OsQuery Monitor - Uptime Script

Tracks system uptime via OsQuery. Ideal for scripting an alert if a device surpasses a set runtime threshold, helping IT Pros and MSPs know when a reboot or maintenance might be necessary.

Linux Unlock Device Script

Instantly restore normal user and root account access on Linux devices previously locked, preserving remote management through Level.

Linux Unauthorized Admins Script

Cross-check detected Linux admin accounts against your authorized list and quickly alert on any unexpected privileges. Ideal for script-based monitoring and automated compliance checks in Level.

Linux Monitor - USB Drive Script

Detects the presence of USB drives on a Linux system. Triggers an alert if any are found, helping MSPs and IT Pros proactively manage data security risks.

Linux Monitor - System Time Check Script

Time drift can cause issues with logging, scheduling, and security across Linux environments, often leading to missed backups and failed authentication checks. This script helps IT Professionals and MSPs maintain consistent time settings, protecting

Linux Monitor - SSH Keys Script

Scans authorized_keys files on Linux systems to detect any SSH keys not defined as authorized. Ideal for script-based monitoring and automated remediation with Level.

Linux Monitor - Firewall Script

Checks for active firewall configurations (UFW, iptables, nftables) in Linux environments. Alerts if no firewall is detected, ensuring critical security measures remain in place. Perfect for script-based monitoring and automated remediation in Level.

Linux Monitor - File Exists Script

Checks for the existence of a specific file on Linux systems. Ideal for script-based monitoring and automated remediation with Level.

Linux Monitor - File Contains Script

Quickly verify if a specific string is present in a Linux file. Perfect for script-based monitoring and auto-remediation.

Linux Monitor - Device Standards Script

Ensure Linux devices meet minimum CPU, RAM, and storage requirements using Level’s custom fields. Use this script within a script-based monitor to detect and alert on non-compliant devices.

Linux Monitor - DNS Servers Script

Verifies the system’s DNS settings match a predefined list. Ideal for using in a script-based monitor via Level to detect and alert on unauthorized DNS server changes.

Linux Lock Device Script

Terminated active user sessions and locked down all Linux accounts, including root, to prevent unauthorized access while preserving remote control via Level.

Linux Get Local Admins Script

Quickly identifies active local admin accounts in the sudo group on Linux systems by checking account expiration and lock status, helping IT pros maintain security visibility and compliance.

Linux Endpoint Intelligence Gathering

A one-click script to collect key system and network details on a Linux device, including system info, local and public IPs, Wi-Fi networks, and ARP tables. Ideal for security audits, network troubleshooting, and lost/stolen device tracking.

Linux Disk Cleanup Script

Automates disk cleanup on Linux by removing cache files, purging old logs, and pruning Docker and Kubernetes leftovers. Reclaims valuable storage, logs its actions, and supports on-demand or scheduled runs through Level’s platform.

Linux Device Erase Script

Securely erase a Linux endpoint with a single command. This script removes all user data, system configurations, and even the root filesystem, making the device completely inoperable.

Linux Delete/Disable Users Script

Easily lock or remove Linux user accounts using a simple comma-separated list. Ideal for script-based monitors or automated compliance workflows in Level, ensuring unauthorized users are swiftly disabled or deleted.

Linux Debian Kernel Cleanup Script

This script removes outdated Debian-based Linux kernels, keeping only the two most recent versions. It helps free up disk space and keeps the system clean while ensuring stability.