Having moved my blog to Ghost I lost a comments section for each post. This was functionality which was built into Blogger (my previous blogging platform) as a standard option, and I wanted to get it back The Ghost platform focuses primarily on the ease of creating the article, and…
This is how I think you can patch a large Windows Server estate on a regular basis balancing the needs of Infosec and a risk adverse corporation. Background In my wanderings round the internet, I've seen articles suggesting you should turn off Windows Update because of the latest patch releases…
This is how I stood up a blog platform for free using the open source Ghost software running on a free-tier Google Cloud Platform (GCP) compute instance Background For some time now I've been wanting to move my blog off the Blogger platform and something else for these reasons:-…
Like many, I have a few domain names. One thecavedb.com is registered with Amazon Web Services and their Route53 product. I did this back in October 2017 as a bit of a 'toe-in-the-water' type of affair to see how it would work. I did research of course, and found…
A quick post, for my reference You have a physical server with a HBA & LUNs presented from a SAN. What's the WWN of a specific LUN? PS> (Get-WMIObject -Namespace root\wmi -Class mpio_disk_info).DriveInfo | Select-Object Name, SerialNumber The "SerialNumber" is the WWN. Happy days…
Assuming you've already got AD object auditing turned on, the following XML XPath filter can filter the Security log of a DC to only return the events related to AD GPO changes <QueryList> <Query Id="0" Path="Security"> <Select Path="…
Recently, web security chap Troy Hunt released 306 million freely downloadable Pwned passwords and created a website to search them. I think this is a very useful resource and one which appears to me to be very well thought out by him. But should you send passwords already in use…
We use Qualys Vulnerability Management at work to scan our assets for vulnerabilities. I needed to identify which assets hadn't been scanned in a long time. This could be done through the web interface by going to Assets->Asset Search and searching for assets with a Last Scan Date…