Well-known SIDs
A list of the more popular well-known Windows security identifiers (SIDs)…
Scheduled task to restart task scheduler
Consider this - you are trying to workaround a critical flaw in the Windows task scheduler service which no one else seams to have, but it causes duplicate processes to be started each day. You don't know why, but restarting the server fixes it, and you find that…
PowerShell - useful commands to know
PowerShell can be daunting for those who are completely new to the scripting language. This is a brief post about some useful commands to know when starting out Get-Command You want to do something, but don't know the command name, or even if there is a command that…
Configuring Putty defaults using PowerShell
Just a quick note to myself on how to setup Putty defaults for my linking using PowerShell commands to set the appropriate registry keys # Create the 'Default Settings' registry key if it doesn't exist if (-not (Test-Path -Path HKCU:\Software\SimonTatham\PuTTY\Sessions\Default%20Settings)) {New-Item…
How I patch 450+ Windows servers each month with minimal risk
This is how I think you can patch a large Windows Server estate on a regular basis balancing the needs of Infosec and a risk adverse corporation. Background In my wanderings round the internet, I've seen articles suggesting you should turn off Windows Update because of the latest…
Finding WWN of LUNs on Windows Server 2008 R2
A quick post, for my reference You have a physical server with a HBA & LUNs presented from a SAN. What's the WWN of a specific LUN? PS> (Get-WMIObject -Namespace root\wmi -Class mpio_disk_info).DriveInfo | Select-Object Name, SerialNumber The "SerialNumber" is the WWN.…
Creating a local version of the Pwned Passwords list
Recently, web security chap Troy Hunt released 306 million freely downloadable Pwned passwords [%5Bhttps://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/] and created a website to search them [https://haveibeenpwned.com/Passwords]. I think this is a very useful resource and one which appears to me to be very well thought out by…
Getting Qualys asset scan information via PowerShell
We use Qualys Vulnerability Management [https://www.qualys.com/suite/vulnerability-management/] at work to scan our assets for vulnerabilities. I needed to identify which assets hadn't been scanned in a long time. This could be done through the web interface by going to Assets->Asset Search and…