Brian Winning Jr.

In an interesting change of terminology, what the PowerShell installer once called "Cancelled" is now called "Abandoned." Actually, it's neither in nearly all cases. Deets follow... #WindowsInsiders #WinGet #MVP https://lnkd.in/dzu-qVDV

3

As part of my responsibilities as a Senior Cybersecurity Architect, I occasionally get to do fun things like dig into the possibilities of getting more out of existing services. Such was the case with Microsoft Purview eDiscovery premium, which recently had a beta Graph API released. Our litigation team has, let's just call it a unique workflow, which requires a third party to assemble a matter, create a package, and then leverage that package in their workflow. Suffice to say we got quite a few comments to the effect of "make this happen". In the end we didn't leverage the beta API, but we did prompt some activity that unearthed existing functionality that streamlined the process. Moral of the story is that while you may not use the new shiny thing, just bringing it up in the right group, may accomplish an equivalent outcome. So ask the questions, bring up the possibilities, and LISTEN to the answers. https://lnkd.in/gxK2CkAZ

6

💥Patching Intelligence 💥 is a core component of Nanitor. So what is the difference between Patch Management and Patch Intelligence ❓ Patch Management usually refers to the process of patching systems of any kind. As Gunnsteinn outlines below, NOT patching regularly can cause serious issues, and we have seen this happen. Most of our customers & partners have chosen a Patch Management tool such as SSCM from #Microsoft, ManageEngine Patch Manager Plus or SolarWinds Patch Manager. Nanitor is not that kind of platform but instead Nanitor provides ➡️ Patch Intelligence ⬅️ - that refers to Nanitor's role as #ThreatExposureManagement and Cyber Asset Attack Surface Management (#CAASM) platform. Nanitor continuously monitors vulnerabilities, misconfigurations, and identity risks, offering actionable insights and remediation plans to reduce exposure. Some of the suggested actions include patching the assets, and based on Nanitor's Severity Rating organizations are able to prioritize the most impactful patches to their cybersecurity posture. https://lnkd.in/eA2u6DTj

9

1 Comment

I was turned over some credentials to remote into a device to provide troubleshooting. The person said, "I don't know why but you have to still enter the enable password even if you set the privilege level correctly." "Well it has to be the AAA settings," I said, not fully knowing what was done yet. Sure enough the authentication was set to none. Nothing doing there. So here is a quick video to show how the authentication needed to point to either the server group, local, or something else. For my example I did order as the TACACS server then local - adding the condition if the router is authenticating to the server.

4

Organisations often transfer inactive OneDrive’s to the manager’s OneDrive. This might not be the best practice—time to rethink your strategies as you may be hit by huge costs once this change is rolled out! Get ready before Microsoft rolls out this change in Q3 2024 for some tenants. Watch the discussion how this can impact! youtu.be/C0K3zmas3vM - Jump to 23min on the video #OneDrive #Archive

1

Having taken a few HackTheBox courses and running a few challenges, I've come to realize just how much Powershell I've forgotten since I last used it. I once heard someone say "Two weeks without coding and I've forgotten 30 years experience." This sent me down a rabbit hole of looking through my old notes and comparing it against some more modern tips and tricks for Powershell Pentesting. As someone that's more at-home at a bash shell, powershell is definitely one of those things you just have to use often to really become accustomed to it. For that reason I wrote a little how-to for myself to recall some of the typical tricks I'd need for pentesting a Windows server. Hopefully you all can get some usage out of it too! I know I'll be referring back to (and most likely updating) this often.

75

5 Comments

I see three notable patch'em-if-you've-got'em (as applicable) things this morning: 1) VEEAM Service Provider Console critical RCE bug (not easy to exploit, but still...), 2) WHATsUP GOLD RCE flaw being exploited (patch was out last August), and 3) ASA WebVPN Vulnerability from 2014 being exploited (wasn't a critical patch at the time...) More info: https://lnkd.in/giacJk2N https://lnkd.in/g3n-d4_b https://lnkd.in/gmNcXc2M

1

A lot of system admins seem to either be asking or are being asked the question: "Why should we keep antivirus/EDR if it can cause the kind of damage we saw from the Crowdstrike incident?" We have to guide the conversation to the right questions, not the easy questions. This isn't a question about avoiding risk, it's a question about aligning risk posture to strategy. "What does our organization require for operations and competitive advantage?" "How do InfoSec capabilities support our ability to operate?" or "What will go wrong and how can we provide assurance?" "What requirements or limitations exist that can help inform our selection of technologies to deliver an InfoSec capability?" "Are our InfoSec capabilities enhancing our competitive advantage?" This aligns at a high level with the questions that frame the "Threat Modeling With ATT&CK" project. It's a good read and worth the time. https://lnkd.in/gGU3F8EX

1

Do security certifications impress you? ✅ SOC 2 Type 2 ✅ FedRAMP ✅ ISO 27001 It shows companies are putting in effort.  But here’s the truth:   Certifications don’t equal bulletproof security.   It shows *effort.* SOC 2 Type 1, for instance, means you've been audited.   But are you really doing *everything*?   Real security is in the ongoing journey.   The ongoing effort of building trust and policies to keep your shareholders safe. ---------- Hey, I'm Ross! 🎯I'm an IT person, I love helping other IT people. I also love helping people with cybersecurity and compliance. If you enjoy my content, you should know: 🔔 I help healthcare organizations with their IT.

31

12 Comments

After repeated Chrome downloads gain a temporary file extension, I figure out it's halfway through its update process. Problem disappears upon proper completion. Deets follow... #WindowsInsiders #MVPbuzz https://lnkd.in/djCmpz2R

2

Cybersecurity Crisis 🚨 in Rhode Island! Ransomware attack on state social services database 😱 threatens to expose sensitive data of hundreds of thousands of residents. https://lnkd.in/emBSjK5S #DataBreach #Cybersecurity #Privacy

2

Ready to roll up your sleeves and get dirty? Want to harden network devices and find vulns in endpoints? I'm getting into the technical nuts and bolts of hardening testing and validation. When NetAlly suggested we do a webinar my only condition was that it be real-world, usable info and not marketing fluff. And they wanted the same! So in part 2, it's about rolling up your sleeves, doing discoveries, scans, and reporting with the CyberScope handheld tester. It does way more than what I have time to show, but we're going to send you off with quick start cheat sheets, and deeper how-to knowledge. If you want to go full super-nerd, you can use a lil' regex magic too. 🪄 Join me LIVE or watch on-demand later Part 2: Implementing Network Hardening October 8, noon Eastern https://lnkd.in/enznR3Yj P.S. You can check out Part 1 on-demand (same link as above, scroll down 👇that page) #networksecurity #networkhardening #wirelesssecurity #vulnerabilitymanagement #cybersecurity #cyberscope

113

7 Comments

I was trying to install multiple language features on Virtual Desktops but struggled with the speed, and some of them didn't have an internet connection... That's where I created a new PowerShell module to do the heavy lifting for me. It grabs the language features you want from the .ISO files for Windows 11. Check it out in my latest blog: https://lnkd.in/e4Q-D7UX #windows11 #languages #howto #techblog #powershell

4

Gotta love Microsoft/Windows. 36 hour project being compiled. Windows decides to update. Doesn't matter how far into the project you are, Microsoft controls the timing. This is why I use Linux where possible. You should have ownership over your devices. #OwnershipMatters #LinuxVsWindows #TechLife #UserControl #Microsoft #MicrosoftFail

1

Sticky Notes is moving under the OneNote umbrella. You can run both the old UWP version and this new one, or... Deets follow. #WindowsInsiders #MVPbuzz https://lnkd.in/g5nUmSqs

2