Frustration is my fuel
Guides showing how to configure and secure your IT infrastructure.
Using various tools and techniques to our advantage.
Before we start, as a reminder you can find Intune documentation here, intune. The main part you need for reference through this part is here, and the recommended Microsoft minimum baseline is here. This blog will focus on how to manually set this policy however Microsoft does provide an Intune Security Baseline Policy Template which …
Continue reading "Microsoft Intune From Scratch 3 – Configure and Control Apps"
Before we can start to configure Intune, we need to think about Domains, Licenses, and Azure Active Directory Groups. If you already have a domain, and AAD groups ready, have assigned your licenses, and set the MDM authority to Intune, then you can skip straight to part 3. If you do not want to continue …
Continue reading "Microsoft Intune From Scratch 2 – Initial Steps"
In a new blog series we are going to be configuring Microsoft Intune from scratch. If you have not used it before and don't know where to start then this is the blog for you. We'll be covering the basics of creating App control, compliance, and antivirus policies, device configuration templates and auto enrolment settings. …
What is it? Priority Account Protection allows you to "tag" accounts as a priority accounts and enables additional protection for malicious email patterns which commonly target company executives, and highly targeted employees. It also provides extra visibility for alerts and investigations which can help improve reporting. This is a great feature as we are now …
While trying to update a server today I was receiving a dpkg error warning that the disk was full. This blog is me simply going through my trial and error process to eventually solving the problem. MAKE SURE YOU BACK UP YOUR ASSET (SERVER) BEFORE DOING ANYTHING LIKE THIS!!! A simple cmd will show disk …
Continue reading "How to remove old Kernel and header versions."
If you have a Microsoft Web Server and you need to disable certain Crypto suites, for example ensure that you are not using SSL 2.0 or 3.0 or DES 56/56! Then IIS Crypto is a great tool for that.Firstly go to ssllabs and run a scan on your site.Once you have the results if there …
Continue reading "IIS Crypto (Managing Cypher Suites in IIS Servers)"
Recently I was playing around with Proxy Servers and while trying to get a HTTPS site working I needed to export my SSL Certificate from an IIS server for use on a Linux Server. Windows exports to a .pfx extension which won't work in linux, and I would also need to extract the private key.After …
Continue reading "How To Export SSL/TLS Certificate From Windows And Import To Linux"
Was just about to finish for the day when I got this working so wanted to post before I forgot lol!We have covered how to enable Windows Firewall logging, and how to enable and install Nxlog to allow Event Logs to be forwarded into Graylog, however up to this point I hadn't figured out how …
Continue reading "Forward Windows Firewall log to Graylog (Using nxlog)"
Believe it or not but the Windows Host firewall does not log by default.Some of you may not even have it enabled, but you really should. Security in depth right? If anyone believes differently please hit me up on Twitter, always happy to debate, and be educated if better practice exists."How do you enable firewall …
In previous posts we have covered using rsyslog to forward logs from Linux servers into Graylog, and also how to use Trend Micro's OSSEC to forward alert logs to Graylog from both Linux and Windows, but here we will show you how to forward Windows logs into Graylog.We won't be covering the use of IPSEC in …
Continue reading "Forwarding Windows Event Logs into Graylog (Nxlog)"
@2codemonte 