Application whitelisting with “AaronLocker”

Aaron Margosis has created a number of PowerShell scripts to assist with the document AppLocker policies and capture event data into Excel workbooks.

https://blogs.msdn.microsoft.com/aaron_margosis/2018/06/26/announcing-application-whitelisting-with-aaronlocker/

USB Restricted Mode within iOS

With iOS 11.4.1, a feature called USB Restricted Mode was included.  This option adds protections against the USB devices being used by law enforcement and private companies that connect over Lightning to crack an iPhone’s passcode.

Go to Settings and Face ID (or Touch ID) & Passcode.  Verify that USB Accessories option is disabled. The switch should be off by default. Once an iPhone or iPad has been locked for over an hour straight, iOS will no longer allow USB accessories to connect to the device.

Sn1per

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities.  The Community version includes the following parameters:

Automatically gather recon on target environments

9 Scan modes to meet any pentest scenario

16+ Auto-pwn exploits added

HTML/TXT/PDF reporting of all scans

Workspace creation and storage of all scan data

https://www.kitploit.com/2018/07/sn1per-v50-automated-pentest-recon.html

https://github.com/1N3/Sn1per

https://xerosecurity.com/

NETworkManager

NETworkManager is an utility for Windows.  It includes several features such as port scanner, ping, traceroute, DNS lookup, etc.

https://github.com/BornToBeRoot/NETworkManager

AutorunsToWinEventLog

AutorunsToWinEventLog is a PowerShell script that runs autorunsc and converts it to Windows Events.

https://github.com/palantir/windows-event-forwarding/tree/master/AutorunsToWinEventLog

https://isc.sans.edu/forums/diary/Using+AutorunsToWinEventLog/23840/

Add PUP protection within Windows Defender

Windows Defender has an optional PUP (Potentially Unwanted Program) protection available, but it is not currently enabled by default.  To enable this feature, launch an elevated PowerShell session and enter the following command:

Set-MpPreference -PUAProtection Enable

To verify if the feature is enabled, use the two following commands.  If “1” is returned, the option is enabled.

$Preferences = Get-MpPreference

$Preferences.PUAProtection

https://www.howtogeek.com/360648/how-to-enable-windows-defender%E2%80%99s-secret-crapware-blocker/

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/detect-block-potentially-unwanted-apps-windows-defender-antivirus

Veeam PN

Veeam PN (Powered Network) Version 1 is a free lightweight SDN appliance.

http://www.itprotoday.com/industry-perspectives/simplify-remote-access-home-labs-and-offices-veeam-pn

https://www.veeam.com/kb2271

Tubi

Tubi is a video service for movies and TV shows from certain studios.  Free apps are available for several platforms such as Roku, iOS, and Android.

https://tubitv.com/

DBeaver

DBeaver is an SQL client and a database administration tool.  It supports Microsoft SQL as well as other relational databases such as MySQL, PostreSQL, SQLite, Oracle, DB2, MariaDB, and Sybase.  Free and paid versions are available for Mac OS X, Windows, and Linux.

https://dbeaver.com/

Everything

Everything is a free utility for Windows for file/folder searches.  Portable versions are available.

https://www.voidtools.com/

https://www.windowscentral.com/microsoft/windows-11/6-alternatives-to-replace-the-search-functionality-on-windows-11