Caveats With Enumerating Local Administrators

There are several ways to get a list of local administrators on a Windows system - be it a server or a client, but the accuracy of the data returned can vary based on the method and whether there is domain controller reachability (assuming the system in question is domain joined…

Resolving Netgear ReadyNas Volume Decryption Failures

I recently had an issue with a Netgear ReadyNAS where following a clean shutdown the encrypted volume would no longer mount during boot. All the expected tricks were tried - different USB thumb drive with the key, different USB port, etc. The device would boot, find the…

ESXi Hosts Disconnecting From vCenter - Investigating ESXi Heartbeats

If you’re seeing issues with ESXi hosts disconnecting from vCenter every ~60 seconds for a very brief period of time and immediately reconnecting, while not having any impact on VM network traffic (i.e., nothing else is going offline or dropping packet’s), read on. Chances are…

Preparing To Decommission Windows DNS Servers

Today I want to write about a few of the tricks I’ve picked up for migrating DNS servers in a Windows AD environment with minimal pain and unexpected service interruptions due to forgotten devices that were pointing to the soon to be gone DNS server. The scenario is that you’ve…

Validating PrintNightmare Remediation with PowerShell

There has been a lot of uncertainty around CVE-2021-34527, dubbed ‘PrintNightmare’. From whether the released out-of-band patches work, to GPO settings & associated registry values which allow the mitigation in the patch to be bypassed, and arguments regarding whether these GPO…

Using Keyboard Macro Keys To Control HomeAssistant

I recently purchased a Logitech keyboard and while I didn’t particularly care for the macro keys I decided to look into whether I could program them to control HomeAssistant. This proved to be rather painless but there are a few steps necessary so I wanted to throw up a short…

Determining Which Process Is Making SMB Requests On Windows

How would you go about finding what process was making SMB requests on a Windows PC? If you’re like me you probably answered either or PowerShell’s . These are the commands I reach for whenever I needed to link a process to a network connection, but the case isn’t so simple for…

Getting MX, SPF, DMARC, DKIM, and SMTP Banners With PowerShell

When diagnosing email issues I tend to start with some basics: MX records, SPF, DMARC and DKIM data. There are a multitude of ways to get these, but I tend to like working in PowerShell, so I wanted to write a function to quickly pull this data. Further, I also like to ensure I…