@scottalanmiller said in What Are You Doing Right Now:
@Texkonc said in What Are You Doing Right Now:
Just got back from an interview. Reflecting. More prep for tomorrow and hunting.
How did it go?
Just got the call, we are prepping the offer and should be in by EOD.
swwwwwwwwwwwwwwwwwwwwwwwwwwwwwwweeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeet.
Trying to figure out where a customer 60GB mailbox is taking hostage in what folder, then I see this gem as an inbox sub folder.
I will start.
https://www.linkedin.com/groups/51443/51443-6255416136884592643
https://www.linkedin.com/redir/redirect?url=http%3A%2F%2Fbit.ly%2FWindowsForensics&urlhash=K1mL&_t=tracking_anet
Nice long 314 page ebook.
https://www.linkedin.com/redir/redirect?url=http%3A%2F%2Fbit.ly%2F2017NetworkSecurity&urlhash=03Gv&_t=tracking_anet
Report of threats, but some good info that may help you batten down the hatches.
https://www.linkedin.com/redir/redirect?url=http%3A%2F%2Fbit.ly%2FLinuxOpenStack17&urlhash=NYI1&_t=tracking_anet
This last one looks like a Linux whitepaper.
Use your dump email account for these.
Do you have the ability to setup a temp server and setup something like Veam, BackupExec, etc... in trial mode that are exchange aware just to trunk the logs and still use your target media?
The USPS apparently said I don't live here anymore. Already submitted a passive aggressive claim asking who authorized the forward.
I thought I was getting lonely with no snail mail.
USPS, thanks for telling people I do not exist. Plus their phone queue is over an hour wait.
DB is offline without issue so far.
Leaving at 3 to go to one of our locations in KS
@scottalanmiller said in What Are You Doing Right Now:
Enjoying a slow day and hoping that tomorrow is truly a holiday.
You jinxed it......
Our VM's backup repository is down and trying to see if someone close to the datacenter can run in, or I will have to make the long trek in. I blame you.
@scottalanmiller said in What Are You Doing Right Now:
Already had one morning meeting. Gardeners are here. Working on a video. Drinking coffee. Working on MS SQL Server.
Whatcha doing in the Microsoft services? Do you know what you are doing with no command line? 
Got home from the parents. Got roped into moving outdoor furniture for pressure washing patio.....
@scottalanmiller said in What Are You Doing Right Now:
Coffee time. Dealing with some office drama, as always.
Wasn't me!
@siringo said in What Are You Doing Right Now:
packing up, ready to hit the road to visit and terrorise the next victim, uh, client.
No, I think your first statement is more accurate! 
Patching Exchange for critical March update. 45m into the 3h+ usual patching for the 5 servers.
Taking over a location from an MSP and I found that there were two accounts that were created in 2019 with only one login on that date in 2019, and the password was listed in the account description field..... Luckily this domain will only exist for about a week under our control before we move them to our domain.
Drafted an email for my management to review before I email the CEO of that MSP. Just to make sure it doesn't backfire on me. CYA since I am about to call out an MSP at horrible security.
@scottalanmiller said in I Cant Even...:
Today a large corporate "IT department" that uses DattoRMM (OMG, shoot me now) ask me if we needed these "apps"...
sc.exe and wmic.exe because DattoRMM was flagging them.
Um, that's WINDOWS. What kind of IT department that manages thousands of Windows computers opens a ticket to their upstream MSP to ask what sc and wmic are? Like, ever heard of Google? Or Windows? Seriously?
Do I need sshd on my linux servers? Can you remove it?
