7MS #351: Turn Windows Logging up to 11
7 Minute Security6 Maalis 2019

7MS #351: Turn Windows Logging up to 11

Today's episode is brought to you by NoteCast. Try it free for 60 days (no credit card required) and enter code 7MS when completing your signup.

In today's episode, I talk about how the level of Windows server/client logging out of the box is...not really awesome. I then look at how we can create a GPO that turns logging "up to 11" using some free tools and cheat sheets.

If you want to simulate this in your own lab by building out an Active Directory environment, check out part 1 of a Webinar series we've been working on called DIY $500 Pentest Lab, which helps you select hardware/software components you need to build a lab. Then coming up soon is part 2 where we'll build out a Windows 2012 server, promote it to a DC, join a couple clients to it, and prepare to start hacking!

Once your AD and clients are setup, you can start slurping up their logs for free using a Papertrailapp account (not a sponsor). I went ahead and paid for a $7/mo plan so I could get 1GB of storage and a little longer log retention.

Then, I used LOG-MD to audit a Windows workstation and get some great recommendations on what registry settings and security policy tweaks to make. Finally, I started turning this into a GPO so I could begin pushing out these settings en masse. My living/breathing document to capture all this information is in a new gist that I plopped here.

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(745)

7MS #745: Securing Your Family During and After a Disaster – Part 10

7MS #745: Securing Your Family During and After a Disaster – Part 10

This episode is a downer, but asks some important topics related to losing a loved one: Do you know what their wishes are for their funeral, their money, cremation vs. burial vs. other? Do you know a...

23 Loka 23min

7MS #744: Using n8n to Automate the Security Dog Food

7MS #744: Using n8n to Automate the Security Dog Food

Hey friends! Today I'm mashing two of our mini-series — eating the security dog food and my new obsession with n8n — into one big automation sandwich. I'll walk you through how Claude and a bunch of J...

17 Loka 26min

7MS #743: Eating the Security Dog Food - Part 9

7MS #743: Eating the Security Dog Food - Part 9

Hey friends, it has been a long time since we talked about eating our own security dog food.  However, I couldn't be more excited about some big ways we've moved the 7MinSec security program forward, ...

9 Loka 25min

7MS #742: Baby's First n8n

7MS #742: Baby's First n8n

Hey friends! I've got some personal and work travel this week, so I'm skipping the tangents (mostly) and jumping straight into something I'm nerdily excited about: Baby's First n8n. If you're not fami...

2 Loka 26min

7MS #741: Tales of Pentest Pwnage - Part 91

7MS #741: Tales of Pentest Pwnage - Part 91

Hey friends! Today's tale of pentest pwnage is brought to you by four hours of sleep, a large mint hot cocoa, and unhealthy levels of giggity. There's a very good reason for all three, but you'll have...

25 Syys 36min

7MS #740: Tales of Pentest Pwnage - Part 90

7MS #740: Tales of Pentest Pwnage - Part 90

Hey friends! We've been on a bit of a Tales of Pentest Pwnage bender lately, so let's keep it rolling with Part 90. (And Mom, relax — this is not one pentest story chopped into 90 parts.) Today is les...

18 Syys 33min

7MS #739: Tales of Pentest Pwnage – Part 89

7MS #739: Tales of Pentest Pwnage – Part 89

Hey friends! Today is a tale of pentest pwnage episode, and this one features a path to escalation I have never seen before – one I could only find few references on the entire Internet. It happened c...

11 Syys 17min

7MS #738: Baby's First ProjectDiscovery Neo

7MS #738: Baby's First ProjectDiscovery Neo

Hey friends! Today I'm talking about Baby's First Neo — and to be crystal clear, I don't mean Keanu, and I don't mean the R&B guy with the hat. I mean the AI-powered pentest assistant from our pals at...

4 Syys 29min

Suosittua kategoriassa Politiikka ja uutiset

uutiscast
vallattomat
aikalisa
politiikan-puskaradio
rss-viihde-media
rss-vaalirankkurit-podcast
rss-ootsa-kuullut-tasta
ootsa-kuullut-tasta-2
otetaan-yhdet
tervo-halme
rss-voi-venaja
rss-asiastudio
rss-podme-livebox
rss-raha-talous-ja-politiikka
rikosmyytit
rss-seksicast
rss-etulinja
rss-kaikki-uusiksi
aihe
et-sa-noin-voi-sanoo-esittaa