SPF, DKIM, and DMARC are different methods to authenticate your email to serve one dedicated purpose, detecting forged sender address in emails used in phishing or spam. SPF, Sender Policy Framework, allows the receiver to check that an email claiming from a specific domain comes from an IP address authorized by that domain’s admin. A typical SPF record is a […]
Microsoft published a new draft release of the security configuration baseline settings for both Windows 10 version 1903 and Windows Server version 1903. Download here: Windows-10-1903-Security-Baseline-DRAFT (direct download link from Microsoft). It includes GPO backups, GPO reports, scripts to apply settings to local GPO, Policy Analyzer rules files for each baseline and for the full set, and spreadsheets documenting all […]
On https://osintframework.com/: OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get at least a portion of the available information for no cost. I originally created this framework […]
April 1 is a horrible day for product launch and yet big companies like Google has the guts to make the bald moves. 15 years ago today on April 1, 2004, Google launched Gmail, a web-based email service that had the power of Google Search built right in. It started as a beta release on an invitation-only basis and officially […]
A Reddit user raised this great question today that I am not aware of. So I did a little research and here is the breakdown of what it is. What is KRBTGT? The KRBTGT is a local default account that acts as a service account for the Key Distribution Center (KDC) service. It’s created automatically when a new domain is […]
After watching a webinar recently where the presenter was using Visual Studio Code to run PowerShell codes he prepared for the demo, it strikes me that maybe it’s time to ditch PowerShell ISE and start using Visual Studio Code for all my coding needs. Setting up VS Code for PowerShell turns out super easy. First, download VS Code from https://code.visualstudio.com […]
On an Active Directory Domain with multiple GPOs in place, it’s nice having a way that can generate reports in various situations. Group Policies applied to my account and computer There is a built-in tool called Resultant Set of Policy (rsop.msc) that scans all active policies and displays them all in a window similar to Group Policy Editor. You will […]
We always use command lines like PING to get the IP address assigned to a specific domain DNS. For example, to get the IP address of google.com, we use: ping google.com As you can see, this only returns one of IP addresses assigned to google.com. To get the full list of IP addresses associated with google.com, you need to use […]