Whizzbang Tech Stuff - qnd

aws_security

Anonymous (anonymous@undisclosed.example.com) — 2021-10-12T18:44:51+00:00

AWS Security Security Solutions Prowler * Prowler, FOSS security assessment tool Example Example of doing just the group 1.0 checks (IAM related) for specific region and producing an HTML report. ❯ ./prowler -p mg -g group1 -r us-east-1 -M csv _ _ __ _ __ _____ _| | ___ _ __ | '_ \| '__/ _ \ \ /\ / / |/ _ \ '__| | |_) | | | (_) \ V V /| | __/ | | .__/|_| \___/ \_/\_/ |_|\___|_|v2.5.0-12August2021 |_| the handy cloud security tool Date: Tue Oct …

bash_configuration

Anonymous (anonymous@undisclosed.example.com) — 2023-03-31T11:34:56+00:00

Bash Configuration Some handy bash configuration for .bashrc # # This setting allows a command to be recalled from history, but not immediately executed. # This allows the command to be modified before being executed. # shopt -s histverify # Exclude things from being saved in history export HISTIGNORE="history*:[ \tbf]g*:hh:hs:jobs:fc:clear:man *" # Prevent duplicate entries export HISTCONTROL=ignoreboth:erasedups # When the shell exits, append to the history file instead of overwriting it sh…

common_event_format

Anonymous (anonymous@undisclosed.example.com) — 2021-10-05T16:16:03+00:00

curl

Anonymous (anonymous@undisclosed.example.com) — 2023-05-31T12:12:01+00:00

curl Check response times The following is an example of a command that can be use to see the timing of various points in a HTTP request like the DNS lookup time. curl -w "dnslookup: %{time_namelookup} | connect: %{time_connect} | appconnect: %{time_appconnect} | pretransfer: %{time_pretransfer} | starttransfer: %{time_starttransfer} | total: %{time_total} | size: %{size_download}\n"

data_manipulation

Anonymous (anonymous@undisclosed.example.com) — 2023-08-14T18:11:36+00:00

Data Manipulation * JSON Base64 Powershell to encode/decode base64 decode [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String((Get-Content data.txt))) encode [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes((Get-Content data.txt)))

edge

Anonymous (anonymous@undisclosed.example.com) — 2025-09-29T16:08:01+00:00

Microsoft Edge * Shortcuts to profiles Keyboard Shortcuts * Goto address bar, Ctrl + L * Search History, In address/location bar, @H + Tab * Duplicate tab, Alt + Enter * Hide/show favorites bar, Ctrl + Shift + B * Open favorites, Ctrl + Shift + O * Search Tabs,

google_fu

Anonymous (anonymous@undisclosed.example.com) — 2021-12-27T15:43:34+00:00

Google Fu Site Search Limit a search to one or more specific sites (site:stackoverflow.com OR site:community.spiceworks.com OR site:support.microsoft.com OR site:docs.microsoft.com) AND foobar Date Range * Use before:yyyy:mm-dd and after:yyyy-mm-dd

json

Anonymous (anonymous@undisclosed.example.com) — 2021-12-16T14:09:20+00:00

JSON Serialize JS Object to JSON var obj = {name: "Martin", age: 30, country: "United States"}; var json = JSON.stringify(obj); console.log(json); Read in JS object and write out JSON to file const fs = require('fs') // Read JS object from file const data = require('./data.js'); // Convert object defined in data.js var json = JSON.stringify(obj_from_data); fs.writeFile('/tmp/data.json', json, err => { if (err) { console.error(err) return } //file written success…

microsoft_365

Anonymous (anonymous@undisclosed.example.com) — 2022-07-25T18:21:54+00:00

Microsoft 365 Resources *

microsoft_endpoint_solutions

Anonymous (anonymous@undisclosed.example.com) — 2022-08-13T00:03:20+00:00

Microsoft Endpoint Solutions Miscellanea * * , local administrator password solution (LAPS) for AAD joined devices

microsoft_excel

Anonymous (anonymous@undisclosed.example.com) — 2022-11-10T13:23:46+00:00

Microsoft Excel Look for substring in a cell =ISNUMBER(SEARCH(“xyz.net”,A4))

microsoft_technologies

Anonymous (anonymous@undisclosed.example.com) — 2023-03-01T16:45:47+00:00

Microsoft Technologies/Solutions (quick-n-dirty) * Windows Terminal * Windows Explorer * VS Code * Powershell * OneNote * Edge * Teams * Sharepoint * SQL Server * Microsoft 365 * Microsoft Excel * Microsoft Endpoint Solutions Resources * * Q&A * *

onenote

Anonymous (anonymous@undisclosed.example.com) — 2026-04-06T16:10:55+00:00

OneNote Keyboard Shortcuts * Ctrl+2, tag text (star) as important * Ctrl+3, tag as question * Ctrl+4, remember for later, highlight * Ctrl+0, clear tags * Ctrl + Alt + 1, make header 1 * Ctrl + Alt + 0, resets the font to the default *

powershell_configruation

Anonymous (anonymous@undisclosed.example.com) — 2021-05-21T15:05:34+00:00

Powershell Configuration A handy POSH configuration set-alias exp explorer.exe Set-PSReadLineOption -HistoryNoDuplicates function h2 { notepad (Get-PSReadLineOption | select -ExpandProperty HistorySavePath) } function h3 { code -n (Get-PSReadLineOption | select -ExpandProperty HistorySavePath) } function hp { Get-History | Out-GridView -Title "Press CTRL, select multiple and Hit OK" -OutputMode Multiple | ForEach-Object { Write-Output "PS> $($_.Comman…

quick_and_dirty

Anonymous (anonymous@undisclosed.example.com) — 2021-08-26T19:46:28+00:00

Quick and Dirty * #slapdashery * Bash Configuration * Powershell Configruation * Google Fu * curl

sentinelone

Anonymous (anonymous@undisclosed.example.com) — 2021-05-11T16:25:51+00:00

SentinelOne Install S1 agent if it's not installed # # This script will install the specified SentinelOne .msi file # # Change the name of the .msi file to match the installation package name # # # Get the site token from the SentinelOne console and specify it below` # $site_token= if ($null -eq (wmic product get name | select-string "sentinel agent")) { msiexec.exe /i \\server_name\share_name\sentinel_installer.msi SITE_TOKEN=$site_token /qn /norestart }

sharepoint

Anonymous (anonymous@undisclosed.example.com) — 2022-11-04T13:34:46+00:00

Sharepoint * Sharepoint Migration Tool/SPMT Report Packer * #powershell * Report folder: %appdata%\Microsoft\MigrationTool\ This is a quick-n-dirty script to collect all the reports from SPMT and package it up as a ZIP archive. The script is designed to be ran in the root of the SPMT report folder,

sign_powershell_script

Anonymous (anonymous@undisclosed.example.com) — 2021-03-10T20:08:49+00:00

Sign Powershell Script * New-SelfSignedCertificate PS C:\tmp\Azure> New-SelfSignedCertificate -CertStoreLocation cert:\currentuser\my -Subject "CN=Local Code Signing" -KeyAlgorithm RSA -KeyLength 2048 -Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -KeyExportPolicy Exportable -KeyUsage DigitalSignature ` -Type CodeSigningCert PSParentPath: Microso…

software_testing

Anonymous (anonymous@undisclosed.example.com) — 2021-05-18T15:01:49+00:00

Software Testing * fuzzing

sql

Anonymous (anonymous@undisclosed.example.com) — 2021-12-27T20:35:14+00:00

SQL Transact SQL Example -- STIG V-214001, V-214002 -- SQL Server must generate audit records when privileges/permissions are modified. -- SQL Server must generate audit records when unsuccessful attempts to modify privileges/permissions occur. -- Check V-214001 and V-214002 use the same logic, so this implementation combines them, set @IsFinding = 0 declare @TblTmp table (AuditName varchar(100), SpecName varchar(100), [ActionName] varchar(100), Result varchar(100)) if not exists( SELECT n…

sql_server

Anonymous (anonymous@undisclosed.example.com) — 2021-12-30T19:25:21+00:00

SQL Server * SQL Server Security Solutions * , Powershell solution that runs SQL scripts against all instances Example Queries Get Config Settings SELECT * FROM sys.configurations Select Into Variable USE master; GO declare @TblTmp table ([name] nvarchar(100), is_disabled bit) insert into @TblTmp ([name], is_disabled) select [name], is_disabled FROM sys.sql_logins WHERE principal_id = 1 select * from @TblTmp

sql_server_security

Anonymous (anonymous@undisclosed.example.com) — 2021-12-28T14:48:17+00:00

SQL Server Security Audit Settings select name, [type] from sys.server_audits SELECT name AS 'Audit Name', status_desc AS 'Audit Status', audit_file_path AS 'Current Audit File' FROM sys.dm_server_audit_status select * FROM sys.dm_server_audit_status

teams

Anonymous (anonymous@undisclosed.example.com) — 2022-08-10T19:10:14+00:00

Microsoft Teams * #cheatsheet Keyboard Shortcuts * Expand/collapse the edit field, Ctrl + Shift + x * Send message, Ctrl + enter * mute/unmute, Ctrl + Shift + m * share screen, Ctrl + Shift + e * temporarily unmute, Ctrl + spacebar *

vs_code

Anonymous (anonymous@undisclosed.example.com) — 2026-04-13T16:44:02+00:00

VS Code Keyboard Shortcuts * * Ctrl + shift + p or F1, command palette * Ctrl + shift + f, search for string across all files in currently opened folder * Ctrl + r, open recently opened files/folders * Ctrl + k Ctrl + o, open folder *

windows_administration

Anonymous (anonymous@undisclosed.example.com) — 2022-10-04T22:16:06+00:00

Windows Administration (quick-n-dirty) * Windows Keyboard Shortcuts User Management Get domain group membership info for specified user net user USERNAME /domain Windows Feature Installation Examples #powershell PS> $servers = ('server1', 'server2') PS> foreach ($server in $servers) {Install-WindowsFeature -ConfigurationFilePath D:\ConfigurationFiles\ADCSConfigFile.xml -ComputerName $server}

windows_explorer

Anonymous (anonymous@undisclosed.example.com) — 2025-03-26T15:03:49+00:00

Windows Explorer Shortcuts * Create new folder, Ctrl + Shift + n * Maximize all windows, Win + Shift + m * Snap window to various positions, Ctrl + Shift + Win + * Open/Maximize/Minimize the program pinned to taskbar, Win +

windows_terminal

Anonymous (anonymous@undisclosed.example.com) — 2023-07-19T12:51:41+00:00

Windows Terminal * Font for Powerline glyphs, CaskaydiaCove Nerd Font Mono * Hanselman Terminal Config Guide, Powerline configuration using Oh My Posh Common Functions Panes * Ctrl + Shift + w - closes a pane * Alt + Shift + - - opens a vertical pane from the current pane