Day: April 8, 2019

How to Discover Active Ports on a Windows Machine

PS C:\Users\kimconnect> get-nettcpsetting | select SettingName,DynamicPortRangeStartPort,DynamicPortRangeNumberOfPortsSettingName DynamicPortRangeStartPort DynamicPortRangeNumberOfPorts----------- ------------------------- -----------------------------AutomaticInternetCustom 49152 16384DatacenterCustom 49152 16384Compat 49152…

How to Use QRadar to Search for a Windows Account Activities

Log into https://qradar/console/qradar/jsp/QRadar.jsp Log Activity > Add Filter > Parameter=Username[Indexed] | Operator=Equals any of |…

Common Windows Maintenance using PowerShell

# Install Windows Features:Install-WindowsFeature SNMP-Service -IncludeManagementToolsInstall-WindowsFeature -name Telnet-Client Install-Module Posh-SSH -Force# Disable Service:sc config "SERVICE_NAME"…

Applying Windows Patches

#Example: Disabling Remote Code Execution(new-object System.Net.WebClient).DownloadFile('https://download.microsoft.com/download/1/6/5/165255E7-1014-4D0A-B094-B6A430A6BFFC/vcredist_x64.exe','C:\temp\vcredist_x64.exe')c\:temp\vcredist_x64.exe /quiet /norestart #Example: Download updates using BITS (cannot invoke…

How to Install Chromium or Chrome on Debian-based Linux

Open Source Chromium Q: What's the difference between Chrome and Chromium? A: Chrome is enhanced…