Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Power Shell
Daily Challenge - PowerShell Pipeline: What Actually Moves Between Commands - 2026-Jul-08
it-programming, discussion, powershell In PowerShell, what does the pipeline operator (|) actually pass between commands?
Daily Challenge - ASCII BEL (7): The Character That Still Rings a Bell - 2026-Jun-26
What is the function of the ASCII control character with the decimal value of 7, known as BEL?
Operation Desert Hydra — AI-Assisted CTI Pipeline: MuddyWater to Kibana
Operation Desert Hydra — AI-Assisted CTI Pipeline: MuddyWater to Kibana 11 validated detections from public sources, OpenCTI graph, and a one-command labTable of ContentsPr 2026-6-8 04:31:1 Author: infosecwriteups.com(查看原文) 阅读量:10 收藏 11 validated detections from public sources, OpenCTI graph, and a one-command labTable of Contents Press enter or click to view image in full size Most threat actor writeups stop too early.
Operation Desert Hydra — AI-Assisted CTI Pipeline: MuddyWater to Kibana
Operation Desert Hydra — AI-Assisted CTI Pipeline: MuddyWater to Kibana 11 validated detections from public sources, OpenCTI graph, and a one-command labTable of ContentsPr 2026-6-8 04:31:1 Author: infosecwriteups.com(查看原文) 阅读量:1 收藏 11 validated detections from public sources, OpenCTI graph, and a one-command labTable of Contents Press enter or click to view image in full size Most threat actor writeups stop too early.
Operation Desert Hydra — AI-Assisted CTI Pipeline: MuddyWater to Kibana
captures four things: The specific behavior — not the technique category The source references that support it, with evidence labels Candidate ATT&CK technique mappings and the reasoning behind each candidate Required telemetry, a detection idea, validation plan, and known limitations Confidence Labels Each record carries one of four evidence labels inherited from the source assessment: Observed — the behavior appears directly in source telemetry, a recovered sample, a screenshot, or a...
Announcing Resume Enhancer: Your Resume, Perfectly Tailored for Every Job
Introduction Navigating the job market can feel overwhelming, especially when each application requires a uniquely tailored resume. That’s where Resume Enhancer comes in—a straightforward yet effective CLI tool designed to help you fine-tune your resume to align perfectly with specific job descriptions. With this tool, you can make sure your application stands out every time, saving you time and effort while boosting your chances of success.
Remote Desktop Connection (RDP) to Azure Arc-enabled Windows Server machines anywhere
12:11 pm• Microsoft Azure, PowerShell, Windows Server HomeMicrosoft Azure, PowerShell, Windows ServerRemote Desktop Connection (RDP) to Azure Arc-enabled Windows Server machines anywhere In this blog post we are going to have a look on how you can connect securely to your Azure Arc-enabled servers running Windows Server using Remote Desktop (RDP).
Best Practices for Event Logging and Threat Detection
2024-08-20 18:35 (CEST) US CERT Executive Summary This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) in cooperation with the following international partners: United States (US) Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI) and the National Security Agency (NSA).
PowerShell/DSC: This repo is for the DSC v3 project
Note This repo isn't accepting code contributions. It's public and open source to show progress and enable feedback. Once we're at a feature complete state, we can start taking code contributions. DSCv3 is the latest iteration of Microsoft's Desired State Configuration platform. DSCv3 is an open source command line application that abstracts the management of software components declaratively and idempotently. DSCv3 runs on Linux, macOS, and Windows without any external dependencies.
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
2024-07-24 18:37 (CEST) US CERT Summary The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju: U.S. Cyber National Mission Force (CNMF) U.S. Cybersecurity and Infrastructure Security Agency (CISA) U.S. Department of Defense Cyber Crime Center...
Windows也能拥有好用的命令行吗？Powershell+Terminal折腾记录（v1.0版本） - 程序设计实验室 - 博客园
PS：本文写于2021年，现在已经是2024年，有了很多新变化，我在接下来的文章里会继续更新。 前言 Windows一向以图形化操作入门容易著称，所以对于命令行的支持一直为人所诟病，比起Linux或者mac都是被吊打的。这一局面在最近几个版本的Windows10更新里，特别是微软官方出了WindowsTerminal这个大杀器之后有所改善~ 所以对于标题的这个问题，只能说「勉强可以吧」，本文介绍几个折腾命令行的方法。 效果图 偷一张官方的截图，应该没人发现吧 建议先熟读官方文档：https://docs.microsoft.com/zh-cn/windows/terminal/ 软件包管理器 Scoop 不用羡慕Linux上好用的apt和yum，Windows上也有不错的软件包管理器，比如chocolate、官方的win-get，还有本文介绍的scoop，相比起chocol ate，scoop的软件包仓库都是社区维护开源的，安全性更有保障，并且比官方的win-get多很多~ 不够可以自己添加软件源，就像apt的PPA源。 官网：https://scoop.sh/ 安装：...
Comando NSLOOKUP para validar cambios DNS dominio
Comando NSLOOKUP para validar cambios DNS dominio Hoy vamos a hablar en una entrada rápida del comando NSLOOKUP, que lo podéis usar tanto en Windows, Linux o MacOS. Este comando nos permite hacer comprobaciones DNS de nuestros dominios.
#100DaysOfYara Challenge
The 100 Days of Yara is a fun challenge created by Greg Lesnewicand inspired by the 100 Days of Code which I did couple year ago. I’ve always found these kinds of challenges interesting because they help in building habits and learning more about specific topics. I’ll be using this page to share my #100DaysOfYara journey 🚀. While my primary goal is to practice more with Yara, I also aim to share my learning so that everyone can benefit from it 💡.
【源码共读】跨平台打开 URL、文件、可执行文件 open
open是一个跨平台的打开文件、URL、可执行文件的库，支持Windows、Linux、Mac，当然这也意味着不能在浏览器环境中使用。 使用 首先看README中的介绍，为什么要使用open： Actively maintained.(积极维护) Supports app arguments.(支持应用参数) Safer as it uses spawn instead of exec.(安全，因为它使用spawn而不是exec) Fixes most of the original node-open issues.(修复了大部分原始的node-open问题) Includes the latest xdg-open script for Linux.(包括适用于 Linux 的最新 xdg-open 脚本) Supports WSL paths to Windows apps.(支持 WSL 路径到 Windows 应用程序) 使用open非常简单，只需要传入一个路径即可： 源码 源码三百多行，这次就不列出全部代码了，直接开始分析，首先看导出部分：...
Troubleshooting and Fixing the "Object Reference Not Set"
Connecting to vCenter using PowerShell is a common task for IT professionals managing virtualized environments. However, encountering errors like “Object reference not set” can be frustrating and disrupt your workflow. In this article, we will explore how to resolved this issue and successfully connect to your vCenter server. Follow these steps to troubleshoot and fix the problem if you ever encounter it.
Quickly validate and enable manual application uninstall via Intune Company Portal using Graph API
I am back and the titles are getting longer! If you are an Intune admin, you will probably be happy to know that one of the most required features has landed: . One thing you need to be aware of, is that this feature is off by default, which means you will have to manually enable it for every app (lots of clicks)! Or, we can automate with PowerShell and Graph API… What’s the problem?
2022 Top Routinely Exploited Vulnerabilities
2023-08-02 20:57 (CEST) US CERT 2022 Top Routinely Exploited Vulnerabilities SUMMARY The following cybersecurity agencies coauthored this joint Cybersecurity Advisory (CSA): United States: The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Federal Bureau of Investigation (FBI) Australia: Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) Canada: Canadian Centre for Cyber Security (CCCS) New Zealand: New Zealand National Cyber...
Azure Cloud management in the Cloud Adoption Framework
8:57 am• Microsoft Azure HomeMicrosoft AzureAzure Cloud management in the Cloud Adoption Framework The Cloud Adoption Framework (CAF) is a set of best practices and tools that help organizations plan and execute their cloud journey. One of the key components of the CAF is the Manage methodology, which provides guidance on how to optimize the management, operation, and governance cloud environments.
Top 4 Ways to Reset Settings App in Windows 10 and Windows 11
Microsoft introduced the Settings app with Windows 8. Since then, it has made countless improvements to the app. The settings app on Windows 11 looks starkly different from Windows 10 and houses more settings and options that previously didn’t exist in Control Panel. Microsoft is slowly trying to reduce dependency on Control Panel and is moving everything in the Settings app to blend with the redesigned UI. But what if the Settings app starts to act up on Windows?
Tales From The Field Weekly Wrap Up for the Week of 03-06-2023 & Pineapple on Peperoni – SQLServerCentral
Hello Dear Reader! Last week was an incredible week. We dropped new content on Monday, Tuesday had the Community Round Table, Wednesday MS Tech Bits, and released YouTube Shorts all week long. We also waded into controversy on Twitter. It began with a seemingly innocent and funny post by Buck Woody (Twitter | @BuckWoodyMSFT) and well.... it just took off from there.
Bilder mit Wasserzeichen
Eine große Zahl von Bildern soll weitergegeben aber nicht verschenkt werden. Zur Verankerung der Autorenschaft, soll der Autorenname sowohl in den EXIF-Daten als auch als Wasserzeichen im Bild selbst angebracht werden. Für ein einzelnes Bild ist das kein Problem, das kann man zum Beispiel mit IrfanView erledigen. Auch bei sehr vielen Bildern ist IrfanView mit seinem Batch-Modus hilfreich, Allerdings kann IrfanView nicht mit verschachtelten Ordnern umgehen.
Consolidated Scripts - All configurational task via PowerShell for Windows 365 Cloud PC under Microsoft Intune Portal (MEM)
18 Jan I have written various individual blog posts on PowerShell creation of all configurational task for Windows 365 Cloud PC under Microsoft Endpoint Portal (MEM).
PowerShell - Create Azure Network Connection (ANC) for Windows 365 Cloud PC
16 Jan If you want to establish a network connection that allows communication between the Windows 365 Cloud PC and the existing Azure Virtual Network (ANC), then keep following this post. Today, I will demonstrate the Powershell method of creating the Azure Network Connection (ANC). Note that we need information from the Azure Portal to make sure you have all the necessary information handy or/or involve the necessary teams who can provide you with the information on Azure Networking.
GitHub - PowerShell/Demo_CI
PowerShell/Demo_CI This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository. You can’t perform that action at this time. You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
PowerShell - Create a custom Windows 11 Enterprise (22H2) + Microsoft 365 Apps golden image for Windows 365 Cloud PC using Marketplace Image
In the previous blog post, I demonstrate how to create a Windows 11 Multi-session golden image for AVD. In today’s post, I want to showcase how to create a custom Windows 11 Enterprise 22H2 + Microsoft 365 for Windows 365 Cloud PC. (Note its not multi-session and instead, its Enterprise edition for 1×1 mapping of desktop/user aka Full Clone) Why will you create a custom Windows 11 Ent Windows 365 Cloud PC Golden Image?
October 20th, 2022 Community Call · Issue #335 · PowerShell/PowerShell-RFC
You can’t perform that action at this time. You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Tech Tribune France
Boutique Microsoft est un excellent outil pour télécharger des produits logiciels pour Microsoft sans craindre les logiciels malveillants. Certains utilisateurs ont signalé qu’après avoir utilisé le Réinitialiser ce PC option, Microsoft Store ne s’ouvre pas ou ne fonctionne pas normalement Si vous rencontrez ce problème, cet article vous aidera.
Building a custom Windows Update Report p1: Parsing HTML via PowerShell on modern systems (no IE)
Wow, it’s been a while! A customer of mine recently wanted a detailed report that should include info such as how many weeks is the Windows on the machine behind the latest available Security Update. We’ve found to a way to combine Intune Data Warehouse and PowerBI to pull data that allows to identify the last installed patch, but we needed data from a different source to find out when that patch was released. And that involved some PowerShell, which Is what this part of the mini-series is about.
PowerShell/PSReadLine: A bash inspired readline implementation for PowerShell
This module replaces the command line editing experience of PowerShell for versions 3 and up.
MSFT Teams Migration Prep: 5 Tips Every IT Manager Must Know
As working from home has grown more common, Microsoft Teams has become a go-to tool for collaboration. In July 2021, Microsoft reported that Teams reached 250 million monthly active users, up from Microsoft’s April report of 145 million daily active users. With more companies relying on the communication and collaboration platform, Teams migrations have increased in frequency.
Azure Arc enabled Server - Store AWS instance metadata as Azure tag
If you want to onboard an AWS EC2 instance (virtual machine) to Azure using Azure Arc for multicloud management, you might want to store some of the AWS instances metadata as Azure tags for your Azure Arc enabled server. One of the easiest ways is to set these tags during the onboarding process of an Azure Arc-enabled server from AWS.
DP-420 Study Guide Microsoft Azure Cosmos DB Developer
Microsoft just announced a new DP-420 Designing and Implementing Cloud-Native Applications Using Microsoft Azure Cosmos DB. That is why I want to share my new updated DP-420 Azure Cosmos DB Developer Specialty Certification Exam Study Guide with you.
Bypass Consent when user opens a canvas apps
I wanted to write about this for a while but never got around it. So here it is… Now-a-days we are building lots and lots of canvas apps for group of users. We create a security group and share the canvas app with that security group. We add users those security group which allows them to access the canvas apps. All good!! But, when users access these canvas apps they get this popup asking them to provide the consent to utilize the connectors that are used in the app.
Error getting nmap to read hosts from file
Nmap Development mailing list archives By Date By Thread Re: Error getting nmap to read hosts from file From: Robin Wood <robin@digi.ninja> Date: Tue, 8 Jun 2021 22:23:22 +0100 Not with nmap, but I've seen similar issues with other tools so recognised that type of error. Glad it is fixed. Robin On Tue, 8 Jun 2021 at 22:21, Kurt Buff <kurt.buff () gmail com> wrote: Genius. Notepad said it was UTF-16 LE. I changed it to ASCII and it's working.
Закрепляем ярлыки на начальном экране в Windows 10 у текущего пользователя
Эта статья — своего рода proof of concept, как можно закрепить программно (открепить) ярлык на начальном экране для текущего пользователя без перезапуска или выхода из учетной записи. Как вы знаете, с выходом Windows 10 October 2018 Microsoft без шума закрыл доступ к API открепления (закрепления) ярлыков от начального экрана и панели задач: отныне это можно сделать лишь вручную. Ниже приведен пример кода для закрепления (открепления) ярлыка на начальный экран, который когда-то работал.
PowerShell Logging for the Blue Team
12 Dec 2016 Blue Team, Blue Team Tools Blue Team, PowerShell Joff Thyer // It is no secret that PowerShell is increasingly being used as an offensive tool for attack purposes by both Red Teamers and Criminals alike. Thanks to the efforts of a number of people in the industry, we have tools like PowerSploit, PowerShell Empire, MailSniper, and Bloodhound just to name a few of the top contenders.
How to Manage Hyper-V VM Checkpoints with PowerShell
9:23 am• Microsoft, PowerShell, Virtualization, Windows, Windows Server • 4 Comments HomeMicrosoft, PowerShell, Virtualization, Windows, Windows ServerHow to Manage Hyper-V VM Checkpoints with PowerShell In this blog post we are going to have a look at how you can create, manage, apply, and remove VM Checkpoints in Hyper-V using PowerShell. Hyper-V virtual machine (VM) checkpoints are one of the great benefits of virtualization.
HCSDiag.exe - Hyper-V Host Compute Service Diagnostics Tool
7:35 am• Microsoft, PowerShell, Virtualization, Windows, Windows Server • 3 Comments HomeMicrosoft, PowerShell, Virtualization, Windows, Windows ServerHCSDiag.exe – Hyper-V Host Compute Service Diagnostics Tool As you know, Hyper-V is not just a server virtualization software anymore. Today, you can find Hyper-V technology across different operating systems, products, and services, like Windows Defender Application Guard, Windows Sandbox, Hyper-V Containers, or many more.
Who is your 2020 PowerShell Hero
PowerShell Ternary Operator If Only January 27, 2020 ICYMI: PowerShell Week of 24-January-2020 January 24, 2020 Once again nominations are open for the 2020 PowerShell Community Heros. We want to know who in our community has gone above and beyond. Have they written a blog post or two that has tremendously helped you out? Is there someone who has gone out of their way to help you with your issue? Is there someone who you always see on the forums answering questions?
Mastering Azure with Cloud Shell
There are multiple ways to interact and manage resources in Microsoft Azure. You can use the Azure Portal or command line tools like the Azure PowerShell module or the Azure CLI, which you can install on your local machine. However, to set up a cloud management workstation for administrators and developers can be quite a lot of work. Especially if you have multiple computers, keeping consistency between these machines can be challenging.
Developing hybrid applications with Azure Stack
More and more we hear from our customers that building hybrid applications is necessary for their business. While Microsoft Azure continues to be the platform of choice for building applications, Azure Stack and Azure together enable building hybrid applications. The consistent experience across both makes it easy.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Power
Contact Power, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack