This is how I think you can patch a large Windows Server estate on a regular basis balancing the needs of Infosec and a risk adverse corporation. Background In my wanderings round the internet, I've seen articles suggesting you should turn off Windows Update because of the latest patch releases…
This is how I stood up a blog platform for free using the open source Ghost software running on a free-tier Google Cloud Platform (GCP) compute instance Background For some time now I've been wanting to move my blog off the Blogger platform and something else for these reasons:-…
Like many, I have a few domain names. One thecavedb.com [https://www.thecavedb.com] is registered with Amazon Web Services and their Route53 product. I did this back in October 2017 as a bit of a 'toe-in-the-water' type of affair to see how it would work. I did research…
A quick post, for my reference You have a physical server with a HBA & LUNs presented from a SAN. What's the WWN of a specific LUN? PS> (Get-WMIObject -Namespace root\wmi -Class mpio_disk_info).DriveInfo | Select-Object Name, SerialNumber The "SerialNumber" is the WWN. Happy days :)…
Assuming you've already got AD object auditing turned on, the following XML
XPath filter can filter the Security log of a DC to only return the events
related to AD GPO changes
Recently, web security chap Troy Hunt released 306 million freely downloadable Pwned passwords [%5Bhttps://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/] and created a website to search them [https://haveibeenpwned.com/Passwords]. I think this is a very useful resource and one which appears to me to be very well thought out by…
We use Qualys Vulnerability Management [https://www.qualys.com/suite/vulnerability-management/] at work to scan our assets for vulnerabilities. I needed to identify which assets hadn't been scanned in a long time. This could be done through the web interface by going to Assets->Asset Search and searching for assets…