Mickaël LOPES retweeted
Elon Musk fired 80% of Twitter (6500 people) and everyone thought that Twitter was doomed.
He was right. Everyone was wrong.
It’s the management masterclass of the decade and every entrepreneur must understand why it worked 🧵:
Mickaël LOPES retweeted
New post on attacking AzureAD Service Principals, Intune, and documenting an Azure Logic App primitive. Also introducing the complete re-write of PowerZure (2.0). posts.specterops.io/attackin…
Mickaël LOPES retweeted
Get ready to enjoy the best of multiple phone apps – social feeds, friends, even food delivery – right on your Windows 10 laptop. Coming soon! 📱💕💻 #SamsungEvent
Mickaël LOPES retweeted
I recently built a thing: A Fiddler inspector for Kerberos messages. github.com/dotnet/Kerberos.N…
Mickaël LOPES retweeted
Just saw this AD hardening guide from the BSI (Germany):
bsi.bund.de/DE/Themen/ITGrun…
Good content, but no rule ID, no <a name="">. It's hard to add references to it in tools producing security reports so users can check it.
cc: @BsiBund
Mickaël LOPES retweeted
Over a dozen new Azure Sentinel connectors announced today! techcommunity.microsoft.com/… #AzureSentinel
Mickaël LOPES retweeted
While *only* ~2000 windows systems have port 53 open on the internet, CVE-2020-1350 does not require a direct connection to port 53. If you phish someone, they click on the domain, and their Windows DNS server receives a recursive query response, it is owned.
Mickaël LOPES retweeted
Time to tell you a secret: your SIM/bank card are cheap javacards (1$ each). On such cards, you can install an app, the GIDS applet, which transform it into a PKI card. You get 2FA for Windows without ANYTHING to install (PKI or logon software). It's cheap, supported and secure.
How I play with SmartCards, PKI and Certificates without any middleware on Windows targets?
- JavaCOS cards | smartcardfocus.com/shop/ilp/…
- @mysmartlogon GIDS applet | github.com/vletoux/GidsApple…
- GlobalPlatformPro | javacard.pro/globalplatform/
- OpenSC | github.com/OpenSC/OpenSC
Mickaël LOPES retweeted
Looks like @anssi_fr has finally published its own list of rules for active directory (in French)
I’ll double check their list with mine and add missing checks if needed
See here for mine:
pingcastle.com/PingCastleFil…
So sad we still haven’t had a discussion to harmonize controls.
L’annuaire Active Directory est le centre névralgique de la sécurité des systèmes d’information #Microsoft
L'ANSSI publie ses points de contrôle sur les annuaires #AD et l'ensemble des recommandations associées :
cert.ssi.gouv.fr/dur/CERTFR-…
Mickaël LOPES retweeted
Windows 10 quietly got a built-in network sniffer, how to use bleepingcomputer.com/news/mi…
Mickaël LOPES retweeted
Before COVID-19: i was born in cities, always lived in cities, will always live in cities.
After COVID-19: i think we should move to the country side. It seems beautiful and very relaxing. I want a big garden at least.🤔
I had discussions like this with several friends by now.
Mickaël LOPES retweeted
"La maitresse part en live" c'est aussi une chaine Twitch !
twitch.tv/la_maitresse_part_…
Notre programme pour les 3 à 6 ans tous les jours d'école à 15H !
RT pour les parents confinés avec leurs enfants !
Pour rappel le youtube c'est ici:
youtube.com/channel/UCIcjtUN…
Mickaël LOPES retweeted
So society’s *real* key workers have just been revealed.
Not the bankers. Not the traders. Not the elite hedge fund managers.
It’s the nurses. The doctors. The delivery drivers. The carers. The porters. The teachers. The shelf stackers. The check out staff.
#COVID19
Mickaël LOPES retweeted
Covid-19 : silence assourdissant des milliardaires et grandes fortunes françaises et européennes.
Mickaël LOPES retweeted
Things Covid has proven:
1. The job you were told couldn't be done remotely can be done remotely
2. Many disabled workers could have been working from home, but corporations just didnt want them to.
3. Internet is a utility, not a luxury
4. Universal healthcare is necessary
Mickaël LOPES retweeted
PowerShell V7 is GA!
This is most important (and best) release ever.
You can xcopy deploy it so you don't need to be admin so everyone can try it right away!
Read all the details here.
devblogs.microsoft.com/power…
Mickaël LOPES retweeted
#mimikatz is now able to decrypt Credential Guard blobs when you have access to Secure Worlds keys (here a vmem file of VMWare)
> github.com/gentilkiwi/mimika…
Thanks to @FSecureLabs & @TimoHirvonen for dumps & work -- more to come with their (mini)dumping ideas with #physmem2profit😉
Mickaël LOPES retweeted
Hey #MSIgnite folks...
Take some time to rest, reflect and recharge after this week. You all accomplished a lot.
All the recorded content and decks will be at ONE simple URL.
Https://aka.ms/msIgniteOnDem…
Please RT & share the knowledge with your network and colleagues.
#azops – at Orlando, FL