how2itsec

When trying to update your Nextcloud VM using the updater in the GUI the following error might be shown:  Check for write permission...

If you are using Anaconda3 on Windows for python development you may want to know, which version of pip is installed: Start Anaconda Shell (...

How to increase my companys IT security? Of course there are many, many, many topics, processes, systems, parameters, awareness and a lot mo...

The McAfee blog released an article about how a current spear phishing attack (T1566) looks like in detail: (Picture from McAfee Blog ) Mo...

When trying to delete files or folders, clean malware, or just modify something on your Windows system, windows won't let you, because t...

Most Fortinet FortiAnalyzer reports use the full domain including subdomains, e.g. www.google.com or maps.google.com. If you want to group s...

Paessler just released for PRTG a remover for the deprecated Enterprise Console: PRTG Enterprise Console Remover.exe: You can uninstall sta...

I just had to restore many broken CHK files of a SD card from a hidden FOUND.000 folder. The program "unchk.exe" helped me: ...

Most companys use an account lockout policy for their directory service like Microsoft Active Directory, LDAP-system, eDirectory or their ow...

You can deactivate the Windows 10 Core Isolation function by changing the following Registry Key and therefore do "Tampering with Windo...

Some places to start to monitor (e.g. for unexpected processes interacting with one of the following), collector forensics and try to protec...

An easy to find possible indicator of compromise (IoC) for your SIEM, AEP or EDR could be a outbound network connection from Windows own reg...

Many SIEM installations use sysinternals sysmon as one of many data sources. Mark Russinovich (Microsoft Azure CTO, co-creator of sysintern...

Performance problem - Distance and Latency More and more companys face the challenging requirement to provide available services, which su...

You can either use the GUI of the FortiGate to list all certificates, or use the CLI. Either using the commands: Using the "get...

Many VMWare ESXi installations make the same mistake: They overcommit vCPUs, don't monitor CPU metrics like %RDY, %CSTP and don't kn...

Most small/medium businesses don't do much configuration, monitoring, cfg-baselineing or follow best practises with their network device...

Recently I discovered something after updating a FortiGate cluster, which I intensively monitor, not only via working monitoring queries, bu...

If you are searching for test results about current Advanced Endpoint Protection/Endpoint Detection and Response tools: MITRE is transparent...

If you are using the Skybox ( https://www.skyboxsecurity.com/ ) solution for your environment, during the initial setup there might be an is...

More and more so called "fileless malware" uses powershell in order to execute malicious actions. In order to find possible malici...

Use OpenSSL to decrypt private key openssl rsa -in *encrypted-key-file* -out *decrypted-key-file* Example: Encrypted private key file:...