Other Posts Tagged "Windows Security"
Today I Learned more Powershell and Ansible Modules
Today I Learned about Ansible and Block/Rescue Modules
What SimeonOnSecurity learned about and found interesting today
SimeonOnSecurity learned and discovered several interesting things today related to Windows security and automation using Ansible.
First, two new and updated repositories were identified. The Windows_STIG_Ansible repository provides a complete solution for configuring Windows systems to meet Security Technical Implementation Guide (STIG) requirements, using the Ansible automation platform. The windows_stigs repository is a collection of Ansible roles for configuring Windows systems to meet STIG requirements, and it is available on Ansible Galaxy, a central repository for sharing Ansible content.
Automate Windows Compliance with Ansible STIG Playbooks
Today I Learned about Auditpol, Sysmon, and Sysmon Configurations
What SimeonOnSecurity learned about and found interesting today
SimeonOnSecurity learned and discovered several interesting things today related to Windows security and event monitoring.
First, two new and updated repositories were identified. The Automate-Sysmon repository provides a solution for automating the installation, configuration, and management of Sysmon, a popular tool for monitoring and logging system activity on Windows systems. The Windows-Audit-Policy repository provides a solution for automating the configuration of Windows audit policies, which control the auditing of various security-related events on Windows systems.
Maximize Windows Auditing with Windows Audit Policy Script
Today I Learned How to Manipulate and Parse JSON in PowerShell and Bash
What SimeonOnSecurity learned about and found interesting today
SimeonOnSecurity has updated a page on his website and learned about a few resources that he finds interesting. The updated page is the writeup for the Invite Challenge on HackTheBox. This page provides an in-depth analysis of the process of solving the challenge on both Windows and Linux systems.
In addition to the updated page, SimeonOnSecurity also discovered some useful learning resources. One of these resources is a blog post by Cameron Nokes that focuses on working with JSON in bash using the jq tool. The jq tool is a command-line utility that makes it easy to parse, filter, and manipulate JSON data.
Today I Learned about NTFS Tweaks and Optimizations
What SimeonOnSecurity learned about and found interesting today
Today, SimeonOnSecurity learned about and found interesting topics related to NTFS tweaks and various repository updates.
In the world of file systems, NTFS is a commonly used file system for Windows. To enhance its performance and reliability, SimeonOnSecurity found a great resource on PonderWorthy discussing NTFS tweaks using fsutil. The article offers insight into how to optimize the NTFS file system for better performance and stability.
Today I Learned about Enforcing Windows Defender Application Control (WDAC) Policies
What SimeonOnSecurity learned about and found interesting today
Today, SimeonOnSecurity delved into the topic of auditing and enforcing Windows Defender Application Control WDAC policies. WDAC is a feature in Windows that helps to prevent unauthorized or untrusted software from running on a device. It provides a means of controlling which applications can run on a device, thereby helping to improve the overall security of the device.
