how2itsec

Problem After I updated my Asus/Intel NUC from proxmox v8.4.14 to 9.1.6, it did not boot anymore. I followed the instructions of https://pve...

Using apt-get update && apt-get upgrade -y on your Ubuntu VM in Azure sometimes does not upgrade all packages: root@hostname6:~# ...

In some applications (e.g. Splunk) you need to disable Transparent Huge Pages THP .  When your systems are running in a managed environment ...

Windows 10 support ended. Microsoft Surface 2 Pro devices can't officially be updated to Windows 11. This guide shows how to switch to L...

If you want to monitor/check (every 10s) continuesly if a website (in this exampe  http://www.google.de ) is reachable using powershell and ...

To execute remote commands or get access to a remote server using ansible, you can do: source =prdeu4spl002  destination = prdus1ans105  aut...

Adding a CA certificate to GitLab which is running in a podman container (also works with docker containers, just replace podman with docker...

Many Gitlab instances run in a docker or podman container. The following is a bash script which  fetches the gitlab-configs and the gitlab-d...

Problem  When you update your Splunk to e.g. version 9.4.4 and get this error while starting splunk: Migrating to: VERSION=9.4.4 BUILD=f...

Commands Backup your container Check which version your Nginx ProxyManager is currently running by: docker exec -it nginx_app_1 /bin/bash Ch...

When the same search is run twice in a splunk cluster, is it using a cache for the results or searching the data a second time? A splunk se...

If you are using Splunk as your SIEM you can try to detect attacks against your FortiGate firewalls by using the following SPL query: index...

The following shows a splunk savedsearch/alert which searches for Splunk buckets which are not correctly replicated to all indexers.  Exampl...

After about two years of effort, here's my personal experience report on "How do I get my relatives/friends to use a password manag...

Mitres Att&ck framework writes about persistence TA0003 : " The adversary is trying to maintain their foothold. "  There are m...

 Microsoft Edge browser has some internal tools:  edge://edge-urls/ Example usage net-export - debugging network traffic edge://net-export/ ...

To manually update Nextrons Aurora Lite EDR agent, follow the steps: https://aurora-agent-manual.nextron-systems.com/en/latest/usage/upgrade...

Problem During start of Nextrons Aurora EDR lite agent the programm shows the following error message: PS C:\Program Files\Aurora-Agent...

Explaination Azure Managed Identities = technical service accounts Password is automatically managed, as it was the case in managed service ...

Some logs (e.g. Microsoft Azure) sometimes are not fully normalized to all lowercase characters. You can use Cribl to adjust those values by...

When running Splunk you want to filter logs, for example to get rid of the many health check probe querys from your monitoring system. Examp...