IAM Engineer, AD/GPO SME. ❤️ Powershell. LEGO, cycling, homelab, etc. Periodic rants about bipolar teenager. Sorry.
Cincinnati, OH
Joined June 2009
- Tweets7.2K
- Following414
- Followers880
- Likes6.4K
CommanderApaul is on BSKY retweeted
SOLD! It has a script to create a new Entra App 😋😈
I'm working in this project that can be helpful for someones related to PowerShell as a Lego pieces.
github.com/ProfKaz/PowerShel…
CommanderApaul is on BSKY retweeted
Question: On-device EDR/HIPS with no cloud telemetry of private data, what's market look like? That would possibly detect/alarm on an illicit update to a Steam game dropping binaries in weird places like past compromise. Know Glasswire and UniFi Proofpoint IPS but want more.
CommanderApaul is on BSKY retweeted
I recommend watching this video with your relevant infrastructure, operations, and service desk team members so they can actually see and understand how this kind of attack works. A demonstration is worth so much more than an order to just "turn it off because it's unsafe."
New video: quick Conditional Access win — token theft phishing protection by blocking device code flow.
Some gotchas for this like Teams devices; otherwise, a no-brainer.
Watch: youtu.be/paesDRjNz8A
CommanderApaul is on BSKY retweeted
Agency-wide email that had just gone out. I’m not often one to advocate for open non-compliance of NASA policies.
But to all my NASA friends—if you saw something, you saw nothing.
CommanderApaul is on BSKY retweeted
One of my favorite parts of consulting at a SME level, is that you will get brought in to help solve other issues that don't 100% fall under your area of expertise, but you know you can fill in the gaps, learn a bit, and help out your client.
CommanderApaul is on BSKY retweeted
Sony why don’t you patent an AI to predict a game people want
Sony patents include idea to lower input lag by using AI to predict which buttons you'll press next
eurogamer.net/sony-patents-i…
ALT Concept art of Concord character: man in blue jacket with goggles holding a rifle
CommanderApaul is on BSKY retweeted
🌶️🌶️🌶️😈
For those unable to get their hands on EDR software for reversing, TrendMicro kindly publishes their resources at help.deepsecurity.trendmicro….
It's possible to download and extract the on-prem appliance and explore to understand how EDRs (if you can even call it that) work.
CommanderApaul is on BSKY retweeted
To emulate often limited information and collection abilities early in an incident, we're going to launch Wireshark to inspect the network before doing other basic troubleshooting. Start somewhere you can!
"But SSH is encrypted."
Troubleshooting is often connecting metadata.
CommanderApaul is on BSKY retweeted
Always struck by how Troubleshooting is a skill distinct from specific product familiarity – it is portable. You think they're the same but they're not. The number of calls that get little done until a Troubleshooter arrives is upsetting and consistently indicates gumption.
