how2itsec

The very critical CVE-2021-44228 can be detected by the following methods as Florian Roth has posted them on GitHub: https://gist.github.co...

When your nextcloud installation is showing an error like the following, then you could use " occ db:add-missing-indices " to repa...

Vulnerability-scanning and management is one of the most important topics in IT-security and unfortunately most companies forget or even don...

Problem Windows VMs (VMware vSphere) have issues when trying to resolve DNS names and run into network timeouts or packet loss on other pro...

From where does Windows know, if a file is from a trusted or untrusted source? Microsofts Smartscreen writes the downloaded origin into the ...

If you want to check if Microsofts Windows Credential Guard CredGuard is active, you may do so by either checking msinfo32.exe or powershell...

 A quite nice explanation of ransomware as a video by Last Week Tonight with John Oliver:       Additional tipps for everyone: https://how2i...

Discover the used SSHv2 algorithms/cipher suite using nmap or zenmap can be done using the follwing nse-script and steps: URL: https://nmap....

  @wdormann posted a very useful flowchart regarding Windows CVE-2021-34527 PrintNightmare: https://www.kb.cert.org/vuls/id/383432 Further...

gpupdate vs gpupdate /force   Microsoft Windows Group Policy refresh can be manually using the command "gpupdate". There is a ...

Netflix released an article about how they use eBPF in order to track and analyze network application traffic without having issues with res...

If your apache2 on linux system (in this case ubuntu 20) does not start due to "'dhparam.pem' does not exist or is empty" ...

Ryan Kovar and Steve Brant from Splunk released on Splunk .conf 2016 a bunch of useful PowerShell SIEM use cases: https://conf.splunk.com/f...

In order to verify your cloudflare API token, simply use the following command:  curl -X GET "https://api.cloudflare.com/client/v4/user...

I just found some nice Microsoft 365 licnese maps, which might be useful comparing serives, for example of Microsoft 365 Enterprise E3 vs E5...

List all your Azure Key Vaults Azure:~$ Azure:~$ az keyvault list --query [0].name "my-keyvault-93456" Azure:~$ Azure:~$ az ...

Microsoft provides some demo or testing pages, in which the Microsoft Windows Defender SmartScreen functionality can be tested, similar to ...

Sometimes you want to simply check something from a Windows system with ping and review it with timestamps. In order to do that you may use ...