Just finished soccer coaching, now fixed Windows Server with Updates and now cleaning up home and setting up another pi-hole.

@kelly said in Network Vulnerability Scan with REporting:

@dbeato said in Network Vulnerability Scan with REporting:

@kelly said in Network Vulnerability Scan with REporting:

What perspective are you scanning from: external; internal, uncredentialed; or internal, trusted? That will affect the tools you use. We used Lynis (https://cisofy.com/lynis/), but that was more about compliance and vulnerability testing from an internal, trusted perspective.

We will be using it internally, and ocassionalky external host but 98% will be internal.

I liked Lynis, but it runs on every device you need to scan rather than performing an external scan. This is more about hardening to protect from an attack instead of simulating a hostile reconnaissance.

So it is agent based, I have used OSSEC and OSSIM for that too.

Migrating S3 to Wasabi

@dafyre said in Network Vulnerability Scan with REporting:

OpenVAS is a good one.

That is what I am using right now, it has great reporting.

Good morning all!

@dafyre said in Network Vulnerability Scan with REporting:

@dbeato said in Network Vulnerability Scan with REporting:

@kelly said in Network Vulnerability Scan with REporting:

@dbeato said in Network Vulnerability Scan with REporting:

@kelly said in Network Vulnerability Scan with REporting:

What perspective are you scanning from: external; internal, uncredentialed; or internal, trusted? That will affect the tools you use. We used Lynis (https://cisofy.com/lynis/), but that was more about compliance and vulnerability testing from an internal, trusted perspective.

We will be using it internally, and ocassionalky external host but 98% will be internal.

I liked Lynis, but it runs on every device you need to scan rather than performing an external scan. This is more about hardening to protect from an attack instead of simulating a hostile reconnaissance.

So it is agent based, I have used OSSEC and OSSIM for that too.

OSSIM is good, as I think it has a built in Vulnerability scanner too, but it's more like a Snort / Suricata / IDS log collecter, IIRC.

OSSIM is Alien Vault OpenSource and can be more convoluted that OpenVAS as it just has so much information and also can be your Syslog Server as well. It is pretty big.

@momurda said in What Are You Doing Right Now:

Just got a Dell laptop delivered for new employee. turn it on. There is now an uninterruptable, unskippable Cortana screen on first boot, with sound on by default, that you cant skip and have to listen to or wait for the text to go by before you can choose your keyboard layout.

PS
Chiclet keyboards are terrible!

You can turn it off the microphone and also the speakers.

This is what I did, created the following script

$key = 'HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\SessionDefaultDevices'
$keyproperty = Get-ChildItem -path $key | Select-Object Name
$keyenv = $keyproperty.Name
Copy-ItemProperty -path Registry::$keyenv -destination 'HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\' -Name Device

Then Setup a script to run 10 Seconds after login through the Task Scheduler

%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -Command C:\scripts\Set-Printer-Default.ps1

Running Windows Updates and Deploying Chocolatey

It has also been shown on other posts:
https://forums.adobe.com/thread/2399959
https://support.citrix.com/article/CTX104375
https://support.microsoft.com/en-us/help/929270/you-cannot-set-a-redirected-printer-as-the-default-printer-in-a-window
https://support.microsoft.com/en-us/help/2620656/invalid-redirected-printers-may-be-available-in-a-remote-desktop-servi

https://www.businessinsider.com/amazon-sets-traps-for-drivers-2018-9

@fiyafly said in Server 2016 Redirected Printer Change:

Reached out to @NetworkNerd, whether just for info for him or he might be able to help understand this. He has been quite the expert on Epicor for a while.

Yeah, I have known he is an Epicor Expert, this is actually Prophet21 but this does not only affect Epicor programs it also affects any other program trying to get the default printer from the HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows registry key.

@scottalanmiller said in What Are You Doing Right Now:

Everyone just left for Legoland and left me here to work.

You can come back after a couple hours and still do what you needed to

@ccwtech said in CTRL-ALT-END in Fedora 28:

@jaredbusch Removing the binding did the trick. It's so nice to be able to do a CTRL-ALT-END without shutting my machine down!

Yeah, that will do a reboot on any Linux based system as well

@scottalanmiller said in What Are You Doing Right Now:

Saturday afternoon, we have 418 people actively reading the site!

That’s nice, as I said very good content.

https://flow.microsoft.com/en-us/galleries/public/templates/5132ace01e9711e79dc3835964ea3218/sync-modified-files-between-onedrive-and-dropbox/

@travisdh1 said in What Are You Doing Right Now:

Getting mad at Windows Updates, more updates after it said no updates were available.

Yeah, specially with 1803

@momurda said in Sync Dropbox & OneDrive:

@dbeato What is Flow? Some sort of office365 workflow app?

YEs, you can automate repetitive task with it to and from different platforms.

Doing some Git pull rebase and push....

@travisdh1 said in Advantages of CentOS or Fedora over Debian?:

@dbeato said in Advantages of CentOS or Fedora over Debian?:

I have been using Debian for a long time since version 3.0 and ever since I have been able to work with it without any issue and I have been using Ubuntu since version 6.04 so I have a long history of it. I started using CentOS based on ML and the good ways of doing things. But I am on majority of my Linux time on Debian distributions.

Back before the days of always online repositories, Debian was great because you were able to have all the software on like 4 DVDs or LOTS of CDs.

Yeah, don't remind me of Mandrivea DVDS!! Nightmares