Monday, February 1, 2021

ZMap

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

https://github.com/zmap/zmap

INetSim

INetSim is a software suite for simulating common internet services in a lab environment.

https://www.inetsim.org/

CodeSandbox

 CodeSandbox is an online coding environment that has a free trier.

https://codesandbox.io/

Recover an object from Active Directory Recycle Bin

To recover an object or user account that was deleted from Active Directory (if the AD Recycle Bin has been enabled), use the command below to view the contents of the items that have been deleted.

Get-ADObject -filter 'isDeleted -eq $true -and name -ne "Deleted Objects"' -includeDeletedObjects

Found the object in question and make note of the GUID parameter.

Deleted           : True
DistinguishedName : CN=Test Account\0ADEL:a769525b-0ac1-40c6-9cb5-9cdd8d221435
                    ,CN=Deleted Objects,DC=test,DC=local
Name              : Test Account
                    DEL:a769525b-0ac1-40c6-9cb5-9cdd8d221435
ObjectClass       : user
ObjectGUID        : a769525b-0ac1-40c6-9cb5-9cdd8d221435

Use the command below with the GUID value.

Restore-ADObject -Identity 'a769525b-0ac1-40c6-9cb5-9cdd8d221435'

https://stealthbits.com/blog/active-directory-object-recovery-recycle-bin/

Friday, January 1, 2021

Command line option to open the old System control panel app within Windows 10

With Windows 10 version 20H2 in the fall of 2020, Microsoft removed access to the old System app within the Control Panel.  One method to view the old app is to execute the following command:

explorer.exe shell:::{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}

Sysmon template files and resources

Below are links to a few different resources for Sysmon template files.

https://github.com/SwiftOnSecurity/sysmon-config

https://github.com/olafhartong/sysmon-modular

https://github.com/f8al/sysmon-config

https://github.com/randomuserid/Tylium/blob/master/Windows/sysmon-att%26ck.xml

https://github.com/wubbaroo/sysmon/blob/master/sysmon_config.xml

https://github.com/Neo23x0/sysmon-config

Below is a link to a guide for Sysmon.

https://github.com/trustedsec/SysmonCommunityGuide/releases

Below are the links to the deployment of Sysmon.

https://github.com/jokezone/Update-Sysmon

https://www.syspanda.com/index.php/2017/02/28/deploying-sysmon-through-gpo/

Below is a resource for the log entries that are created.

https://www.blackhillsinfosec.com/a-sysmon-event-id-breakdown/

Below is a cheat sheet page.

https://github.com/olafhartong/sysmon-cheatsheet

Newer versions can block certain file types.

https://www.bleepingcomputer.com/news/microsoft/microsoft-sysmon-can-now-block-malicious-exes-from-being-created/


Wi-Fi QR Code generator

The following web site allows the creation of a QR code for entering new Wi-Fi parameters with Android and iOS.

https://qifi.org/

Diagrams.net

Diagrams.net is a web site that has an on-line diagram option, as well as local application downloads for platforms such as Windows and Linux.

https://www.diagrams.net/

Parsec

Parsec is a remote access application that is intended for gaming.

https://parsecgaming.com

Restic

Restic is a backup application that supports Linux, Windows, and macOS.  It supports several different destinations option such as SFTP.

https://github.com/restic/restic

https://restic.readthedocs.io/en/latest/

https://www.cloudsavvyit.com/9418/how-to-use-the-restic-backup-program-on-linux/