Finding WWN of LUNs on Windows Server 2008 R2

A quick post, for my reference You have a physical server with a HBA & LUNs presented from a SAN. What's the WWN of a specific LUN? PS> (Get-WMIObject -Namespace root\wmi -Class mpio_disk_info).DriveInfo | Select-Object Name, SerialNumber The "SerialNumber" is the WWN.…

Audit AD GPO changes

Assuming you've already got AD object auditing turned on, the following XML XPath filter can filter the Security log of a DC to only return the events related to AD GPO changes <QueryList> <Query Id="0" Path="Security"> <Select…

Creating a local version of the Pwned Passwords list

Recently, web security chap Troy Hunt released 306 million freely downloadable Pwned passwords [%5Bhttps://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/] and created a website to search them [https://haveibeenpwned.com/Passwords]. I think this is a very useful resource and one which appears to me to be very well thought out by…

Getting Qualys asset scan information via PowerShell

We use Qualys Vulnerability Management [https://www.qualys.com/suite/vulnerability-management/] at work to scan our assets for vulnerabilities. I needed to identify which assets hadn't been scanned in a long time. This could be done through the web interface by going to Assets->Asset Search and…