Friday, January 1, 2021

Command line option to open the old System control panel app within Windows 10

With Windows 10 version 20H2 in the fall of 2020, Microsoft removed access to the old System app within the Control Panel.  One method to view the old app is to execute the following command:

explorer.exe shell:::{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}

Sysmon template files and resources

Below are links to a few different resources for Sysmon template files.

https://github.com/SwiftOnSecurity/sysmon-config

https://github.com/olafhartong/sysmon-modular

https://github.com/f8al/sysmon-config

https://github.com/randomuserid/Tylium/blob/master/Windows/sysmon-att%26ck.xml

https://github.com/wubbaroo/sysmon/blob/master/sysmon_config.xml

https://github.com/Neo23x0/sysmon-config

Below is a link to a guide for Sysmon.

https://github.com/trustedsec/SysmonCommunityGuide/releases

Below are the links to the deployment of Sysmon.

https://github.com/jokezone/Update-Sysmon

https://www.syspanda.com/index.php/2017/02/28/deploying-sysmon-through-gpo/

Below is a resource for the log entries that are created.

https://www.blackhillsinfosec.com/a-sysmon-event-id-breakdown/

Below is a cheat sheet page.

https://github.com/olafhartong/sysmon-cheatsheet

Newer versions can block certain file types.

https://www.bleepingcomputer.com/news/microsoft/microsoft-sysmon-can-now-block-malicious-exes-from-being-created/


Wi-Fi QR Code generator

The following web site allows the creation of a QR code for entering new Wi-Fi parameters with Android and iOS.

https://qifi.org/

Diagrams.net

Diagrams.net is a web site that has an on-line diagram option, as well as local application downloads for platforms such as Windows and Linux.

https://www.diagrams.net/

Parsec

Parsec is a remote access application that is intended for gaming.

https://parsecgaming.com

Restic

Restic is a backup application that supports Linux, Windows, and macOS.  It supports several different destinations option such as SFTP.

https://github.com/restic/restic

https://restic.readthedocs.io/en/latest/

https://www.cloudsavvyit.com/9418/how-to-use-the-restic-backup-program-on-linux/

What2Log

What2Log is a web site that has information on logging parameters for different platforms.

http://what2log.com/


Remoku

Remoku is a web site to allow remote access to a Roku device.

http://remokutv.com

Wednesday, December 2, 2020

lshw command within Linux

The lshw command within Linux can return details concerning the hardware of a machine.  The command below returns a list of all hardware.

sudo lshw -short


The command below shows just the entries for the disk class.

sudo lshw -short -C disk

More details can be obtained by excluding the -short parameter.

sudo lshw -C disk


https://www.cloudsavvyit.com/14863/how-to-use-lshw-in-linux-with-a-practical-example/

inxi for Linux

The inxi application is an utility for Linux to obtain system information.  To install on a Debian-based system, use the command:

sudo apt install inxi

The command below will display CPU information.

inxi -C


The following command will return memory details.

sudo inxi -m

The command below will display a summary of various information.

sudo inxi -F

https://www.cloudsavvyit.com/8123/the-linux-system-information-tool-inxi/