The Curious Engineer

All blogs / Security

Stuff n Things

learn.microsoft.com/en-us/archive/blogs/kfalde

Yep I write about Stuff.. and Things

SecurityDevOps / SRE / infrastructureWindows internalsMicrosoft blogsMSDN archive

’10’15’20’25
Posts
46 from 25 Aug 2008 to 13 May 2017
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/kfalde/feed.xml

2017 2

  1. Securing your PowerShell Operational Logs
  2. PSLockDownPolicy and PowerShell Constrained Language Mode

2016 3

  1. Checking effective audit policy forest wide (Get-Auditpol)
  2. DNS Debug Log–Enabling / Retrieving / Searching
  3. EMET and DEP

2015 4

  1. LAPS Audit Reporting via WEF PoSH and PowerBI
  2. EMET Reporting
  3. Some PoSH to help with EVT Xpath filter creations
  4. Restricted Admin mode for RDP in Windows 7 / 2008 R2

2014 11

  1. Updated EMET.admx file to enable disabled settings for Default sets
  2. Creating Exclusions from the Default Sets in EMET ADMX GPO’s
  3. KB2871997 and Wdigest - Part 2
  4. KB2871997 and Wdigest - Part 1
  5. Managing Trusted Sites via Policy for EMET ASR
  6. Testing the ASR feature for Office documents in EMET 5.0
  7. Managing IE Sites for EMET with ASR (Attack Surface Reduction)
  8. Setting EMET Local Configuration via GPP
  9. Configuring EMET via GPO/GPP w/o using the ADMX files
  10. Xpath Event Log Filtering
  11. Automatically refreshing EMET GPO’s

2013 1

  1. Restricted Admin mode for RDP in Windows 8.1 / 2012 R2

2010 3

  1. Another WSUS Cleanup Script
  2. Some thoughts on Adobe Reader and malware
  3. Some more logparser & eventcomb stuff for IR work

2009 14

  1. Determining the cause of FCS client performance issues
  2. Logparsing FCS to find files that were infected
  3. Dealing with malware that creates .exe’s on file shares
  4. How to go green with FCS
  5. Some Interesting FCS SQL Queries
  6. Update Views for FCS in WSUS
  7. Cheap real time monitoring for Conficker clients
  8. WSUS FCS Definitions
  9. Blocking and finding Conficker and Downadup systems
  10. Understanding FCS Definitions
  11. Using Logparser + Eventcomb to find malware
  12. How-to: Removal of Conficker in your FCS environment
  13. More on File Shares and Autorun.inf with regards to malware
  14. Malware Win32/Conficker.B W32.Downadup.B

2008 8

  1. Changes to Microsoft Anti-Malware
  2. FCS .adm settings
  3. How to add extra scheduled scans or definition updates for FCS
  4. FCS Intervals
  5. FCS and System Center Essentials
  6. Automating WSUS Cleanup
  7. FCS SP1
  8. FCS Database Sizing