Security, et al
Randy's Blog on Infosec and Other Stuff
Follow @randyfsmith
previous
|
next
powered by
Bloget™
Search
Categories
All (172)
Applocker (2)
Audit Logs (19)
Product Updates (16)
Security (73)
Sharepoint Security (9)
Recent Blogs
How to Detect Pass-the-Hash Attacks Blog Series
Come meet Randy in Orlando at Microsoft Ignite at Quest's Booth #1818
Detecting Pass-the-Hash with Honeypots
Catch Malware Hiding in WMI with Sysmon
For of all sad words of tongue or pen, the saddest are these: 'We weren’t logging’
Experimenting with Windows Security: Controls for Enforcing Policies
Sysmon Event IDs 1, 6, 7 Report All the Binary Code Executing on Your Network
Yet Another Ransomware Can That Can be Immediately Detected with Process Tracking on Workstations
Cracking AD Passwords with NTDSXtract, Dsusers.py and John the Ripper
Cracking local windows passwords with Mimikatz, LSA dump and Hashcat
Archive
February 2019 (1)
September 2018 (1)
August 2018 (1)
June 2018 (2)
March 2018 (1)
December 2017 (2)
November 2017 (2)
October 2017 (3)
September 2017 (2)
July 2017 (1)
More...
Upcoming Webinars
AD Certificate Services: A Massive Chunk of Windows Security Functionality Finally Gets the Security Research It Deserves
Linux Security: Locking Down Admin Access with SSH and Sudo
Understanding Broken Object Level Authorization: The Quiet Access Control Failure Undermining Today’s Apps
Patching 3rd Party Apps on PCs Managed by Intune
Additional Resources
User name:
Password:
/
Forgot?
Register
January 2026
Patch Tuesday
"Patch Tuesday - Starting 2026 with a Bang; 3 Zero Days " - sponsored by LOGbinder and Supercharger
.
Cookies help us deliver the best experience on our website. By using our website, you agree to the use of cookies.