how2itsec

Many VMWare ESXi installations make the same mistake: They overcommit vCPUs, don't monitor CPU metrics like %RDY, %CSTP and don't kn...

Most small/medium businesses don't do much configuration, monitoring, cfg-baselineing or follow best practises with their network device...

Recently I discovered something after updating a FortiGate cluster, which I intensively monitor, not only via working monitoring queries, bu...

If you are searching for test results about current Advanced Endpoint Protection/Endpoint Detection and Response tools: MITRE is transparent...

If you are using the Skybox ( https://www.skyboxsecurity.com/ ) solution for your environment, during the initial setup there might be an is...

More and more so called "fileless malware" uses powershell in order to execute malicious actions. In order to find possible malici...

Use OpenSSL to decrypt private key openssl rsa -in *encrypted-key-file* -out *decrypted-key-file* Example: Encrypted private key file:...

Sometimes I have so many or too large files opened with Notepad++ ( GitHub ) --> it stops starting the next time and hangs. To resolve...

If you're having a small network with a SonicWALL firewall and you've published a service using destination NAT (DNAT) to the inte...

The FortiGate uses OFTP (Fortinets proprietary Optimized Fabric Transfer Protocol, not Odette File Transfer Protocol ) to transfer data betw...

Splunk has identified an issue regarding timestamps, which are intensivly used for data correlation in many Splunkbased logging and SIEM sys...

Fortinet has released PSIRT FG-IR-19-184 ( CVE-2019-6697 ) about a vulnerability in FortiOS of the FortiGate firewall. A DHCP packet may c...

How to Linux show all cronjobs of all users (not ldap or nis users): Use the following command as root: for user in $(cut -f1 -d: /etc/pass...

Because there are some people on the internet asking for experience on "is my Intel NUC supporting ESXi version x.y.z?", so I will...

When setting up VPN-tunnel from an Apple iPhone or iPad running iOS using IPSec with IKEv2 you need to know, which IPSec proposals the iPh...

If you are running a Windows Server 2016, are using the integrated Windows Server Backup utility and you want to save the backup to a remote...

A quick way to check or beginn to troubleshoot the used protocol, authentication, encryption and connection status of Microsofts Outlook cli...

The current version PRTG 19.3.51/19.4.52 includes some security fixes: PRTG Core Server XSS Cross-Site-Scripting We fixed potential refle...

If you are using SonicWALL E-Mail-Security as your antispam solution there are some useful ways to troubleshoot issues using different logs....

Fortinet released two "Customer Support Bulletins" (check fortinet support portal ) regarding a possible issue with uninterruptibl...

Ideas for securing your layer 2 switching infrastructure No matter if you use Cisco, Extreme Networks, HP or any other vendor, most of th...

If you are running a virtual machine with NextCloud v16 on linux ubuntu and you want to extend /mnt/ncdata, then: Make sure your backup is...

If VMWare ESXi/vCenter/your vSphere environment does not show a virtual machine snapshot , however it is there and the virtual machine is us...

I have found a vulnerability in all FortiOS versions, including the current 5.4/5.6/6.0/6.2 branches. The issue has been fixed in 6.0.3/6.2....