Ok, I got scan information imported into Kvasir. It is a cool tool, but will not serve my purposes of vulnerability tracking.

Kvasir is really just a way to share scan with a customer instead of giving them 30k page PDFs. So for that purpose the tool is really useful. The customer you are sharing the data with can take notes on each vulnerability, see solutions, see affected IPs, etc.

It also organizes vulnerabilities by categories, hosts, and provides various statistics. You can also perform metasploit attacks straight from Kvasir.

@NerdyDad thanks, I read the article before and then forgot... thanks.

I just happened stumbled upon Trello having been purchased by Atlassian. I had no idea.

@JaredBusch Going through the logs currently

@Mike-Davis said in AD CS hosed - anyone have any experience?:

@scottalanmiller said in AD CS hosed - anyone have any experience?:

So the SBS is the one and only AD in this case?

Sorry, I think we're interpreting the word cluster differently here. When I read that I though you were talking about Microsoft Cluster Server - which is a different technology than multiple domain controllers. He had three domain controllers.

In that case, how do you recover from something like this? Since the FSMO roles are on a 2003 server, do you start running through the various esentutl.exe commands?

Right, I'm talking about an AD application cluster (the set of domain controllers for one domain.) SBS has to be the root controller in order to work. And if you have a cluster (this isn't AD specific but is a general thing about clustering) you can't do restores. If you restore a cluster node like this, you corrupt the entire cluster in many cases, if you are lucky just one node. AD DCs form a database cluster under the hood, which is how they handle failovers, but that means that you have to protect them like a normal database cluster and let them resync from a rebuild, never do a restore.

https://community.spiceworks.com/topic/1988106-ad-logins-dont-work-after-baremetal-restored-windows-2008-dc

Yes, you'll likely need to seize roles on one of the 2012 R2 machines and just retire the SBS 2003 machine.

We use a channel per team or project. So sales has one, but so does an individual project that might not use an entire team or is built from bits of other teams.

@msff-amman-Itofficer said in What will happens if 2nd DHCP server appears on network that already is served by DHCP from a router ?:

@pchiodo

Yup there is :

https://www.symantec.com/connect/downloads/detect-rogue-dhcp-servers-network

suprised to find this actually...

It's pretty easy at the network level, just look for DHCP traffic from one that one source.

@StrongBad said in Deodorizing a Smelly PC:

That's a lot of money to fix a laptop. How old was it?

It was not old. It was a Latitude E5570 purchased in mid 2016.

I got my USB monitor today in preparation of the remote work, and got my wired/wireless Bluetooth mouse a couple days ago:
(mouse stock photo, didn't take my own) Razer Orochi
0_1493159016895_razer-orochi-usp21-v2.png

(my pic)
Running an hour long 1080p video test on it to make sure it'll do it's job...
0_1493159024895_WP_20170425_15_20_08_Rich_LI.jpg ,

We ran into this issue last week with several legacy applications we soon hope to commit to the bone yard...

@BBigford said in Networking clear up question:

@StrongBad said in Networking clear up question:

What did they have to say when you explained the difference between a protocol and a physical connector?

Acted like they didn't hear what I said. lol

Probably what they did the last 100 times someone pointed out how clueless they are. Only a trend of burying their heads in the sand would allow them to think that they could state something like that out loud and not sound like idiots.

@BBigford said in SQL single instance or multiple:

@JaredBusch said in SQL single instance or multiple:

The SMB almost never needs multiple SQL Server instances. Saying it is for security means that there are jsut bad software developers in the loop that did not write their applicaiotn to use appropriate permissions.

One thing I've been told is people who don't understand multiple instances, want them. Those who do know about them, don't want the hassle.

Generally true. Sometimes you need different versions, and then it can make sense.

@msff-amman-Itofficer said in A Mandate to Be Cheap:

@scottalanmiller

But I work for non profit organization ... where cheap means cheap

As Jared points out, if their goal was to provide whatever service that their mandate is, they would not be cheap. Cheap is just another work for wasteful or ineffective.

@coliver said in Digital Phone Lists - Internal WebSite:

What kind of phone system do you have? Why not use something like FOP2? That way the phone list is always up to date. If you're using FreePBX you can write a script to output a phone list nightly.

FOP2 is a great choice for a viewable panel. but it is not a list for quick reference.

I keep 3 tabs open with FOP2 most of the day. 2 clients and our phone system.

Can't believe that this did not get linked post MangoCon but here is the presentation.

Youtube Video

@msff-amman-Itofficer said in Cisco Aironet 1830 Issue with HTTPS Interface:

So much for Cisco Over Engineering products

Um.... do people actually think that?

@JaredBusch said in Webroot Blocks Facebook:

I had a ton of false positive hits today from webroot.

That's what I've heard from a few other people.

@JaredBusch said in Default Domain Policy:

@dafyre said in Default Domain Policy:

@scottalanmiller said in Default Domain Policy:

@dafyre said in Default Domain Policy:

@JaredBusch said in Default Domain Policy:

@dafyre said in Default Domain Policy:

Server 2016 Default Policies located here:
http://france.wellston.biz/DefaultPolicies_Server2016.zip
MD5 Checksum: 708c92da241ae1c7163125d7cdf96299

Why not on a github or something?

Hindsight is 20/20, lol.

Why not NOW though?

Link fixed.

https://github.com/dafyre/default_gpo_policies/blob/master/DefaultPolicies_Server2016.zip

MD5 checksum is the same.

Issue created

Issue fixed. See updated link, https://github.com/dafyre/default_gpo_policies

@coliver said in Diving into the ISO OSI Network Stack Discussion:

I always assumed iSCSI was at the application layer because it's in the name. iSCSI is literally SCSI commands encapsulated in TCP/IP packets.

Good way to think of it.